423 matches found
[SECURITY] Fedora 27 Update: okular-17.12.3-2.fc27
A document viewer...
[SECURITY] Fedora 28 Update: okular-18.04.3-2.fc28
A document viewer...
Mozilla: Malicious PDF can inject JavaScript into PDF Viewer
The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions of the PDF viewer by its worker. This vulnerability affects Firefox ESR 52.8 and Firefox 60...
Mozilla Firefox JavaScript Injection Vulnerability
Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A malicious JavaScript injection vulnerability exists in Mozilla Firefox. The vulnerability arises because the PDF viewer fails to adequately validate the PostScript calculator functionality. T...
Mozilla Firefox Same Origin Protection Bypass Vulnerability
Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A PDF viewer same-origin protection bypass vulnerability exists in Mozilla Firefox. A remote attacker can exploit this vulnerability to bypass the PDF viewer's same-origin restriction and view...
UBUNTU-CVE-2018-5157
Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for the viewer. This could allow the site to retrieve PDF files restricted to viewing by an authenticated user on a third-party website. This vulnerability affects Firefox ESR 52.8 an...
Foxit Reader OCG name Remote Code Execution Vulnerability
Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the OCG name attribute, which can be exploited to execute arbitrary code in the context of the current process due to a lack of validation before performing an operation ...
xpdf denial of service vulnerability
Xpdf is an open source PDF file viewer, this software runs on X Window as well as Motif. xpdf also runs on all classes of Unix operating systems. xpdf 4.00 in the JPXStream.cc in the JPXStream::close function has a denial of service vulnerability. An attacker can exploit this vulnerability to cau...
[SECURITY] Fedora 26 Update: evince-3.24.2-2.fc26
Evince is simple multi-page document viewer. It can display and print Portable Document Format PDF, PostScript PS and Encapsulated PostScript EPS files. When supported by the document format, evince allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents...
USN-3503-1: Evince vulnerability
It was discovered that Evince incorrectly handled printing certain DVI files. If a user were tricked into opening and printing a specially-named DVI file, an attacker could use this issue to execute arbitrary code...
Evince Command Injection Vulnerability
Evince is a GNOME desktop environment of a PDF, PostScript, DjVu, TIFF and DVI document viewing tools. A command injection vulnerability exists in Evince version 3.24.8. There is currently no information about this vulnerability...
Remote code execution vulnerability in Adobe Acrobat and Reader (CNVD-2017-35859)
Adobe Reader, etc. are the United States of America Auduby Adobe company's products. Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tools; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are the two update...
CVE-2017-14550
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a "Possible Stack Corruption starting at STDUDjVuFile!DllUnregisterServer+0x000000000000e8b8."...
[SECURITY] Fedora 24 Update: evince-3.20.1-3.fc24
Evince is simple multi-page document viewer. It can display and print Portable Document Format PDF, PostScript PS and Encapsulated PostScript EPS files. When supported by the document format, evince allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents...
RHEL 7 : evince (RHSA-2017:2388)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2388 advisory. The evince packages provide a simple multi-page document viewer for Portable Document Format PDF, PostScript PS, Encapsulated PostScript EPS files,...
[SECURITY] [DSA 3916-1] atril security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3916-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 21, 2017 https://www.debian.org/security/faq -...
[SECURITY] Fedora 26 Update: evince-3.24.0-3.fc26
Evince is simple multi-page document viewer. It can display and print Portable Document Format PDF, PostScript PS and Encapsulated PostScript EPS files. When supported by the document format, evince allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents...
Debian Security Advisory DSA 3911-1 (evince - security update)
Felix Wilhelm discovered that the Evince document viewer made insecure use of tar when opening tar comic book archives CBT. Opening a malicious CBT archive could result in the execution of arbitrary code. This update disables the CBT format entirely. OpenVAS Vulnerability Test $Id: deb3911.nasl...
IBM Daeja ViewONE Arbitrary File Download Vulnerability
IBM Daeja ViewONE Virtual, Daeja ViewONE Standard, and Daeja ViewONE Professional are all products of IBM Corporation of the U.S.A. IBM Daeja ViewONE Virtual is a document viewer that supports TIFF, PDF, and Office-based documents. IBM Daeja ViewONE Virtual is a document viewer that supports TIFF...
