CentOS 7 : evince / okular / poppler (CESA-2019:2022)

An update for poppler, evince, and okular is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Fedora Update for ghostscript FEDORA-2019-22f1c93255

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Adobe Acrobat/Reader Heap Overflow Vulnerability (CNVD-2019-28661)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. A heap overflow vulnerability exists in Adobe Acrobat/Reader. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat/Reader Buffer Overflow Vulnerability (CNVD-2019-30094)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader has a buffer overflow vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat/Reader Out-of-Bounds Write Vulnerability (CNVD-2019-29559)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader has an out-of-bounds write vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat/Reader Integer Overflow Vulnerability (CNVD-2019-30088)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. An integer overflow vulnerability exists in Adobe Acrobat/Reader. An attacker can exploit this vulnerability to obtain information...

USN-4091-1 poppler vulnerability

It was discovered that poppler incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service...

exempi: Use after free via a PDF file containing JPEG data

An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service invalid memcpy with resultant use-after-free or possibly have unspecified other impact via a .pdf file containing JPEG data, related to XMPFiles/source/FormatSupport/ReconcileTIFF.cpp,...

The vulnerabilities of PDF viewing and editing programs developed by Adobe Acrobat, Acrobat Reader, Adobe Acrobat Document Cloud, and Adobe Acrobat Reader Document Cloud involve reading beyond the buffer in memory, allowing attackers to compromise the confidentiality of protected information.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Acrobat Reader, Adobe Acrobat Document Cloud, and Adobe Acrobat Reader Document Cloud lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the...

USN-4067-1 evince vulnerability

It was discovered that Evince incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service or to execute arbitrary code...

UBUNTU-CVE-2019-13290

Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fzappenddisplaynode located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display list node...

CVE-2019-10177

A stored cross-site scripting XSS vulnerability was found in the PDF export component of CloudForms, versions 5.9 and 5.10, due to user input is not properly sanitized. An attacker with least privilege to edit compute is able to execute a XSS attack against other users, which could lead to...

USN-4034-1 imagemagick vulnerabilities

It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of th...

CVE-2018-19447

A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK ActiveX 5.4.0.1031 when parsing the URI string. An attacker can leverage this to gain remote code execution...

Adobe Acrobat/Reader Memory Misreference Vulnerability (CNVD-2019-19840)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. A memory misreference vulnerability exists in Adobe Acrobat/Reader. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat/Reader Arbitrary Code Execution Vulnerability (CNVD-2019-21655)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat/Reader arbitrary code execution vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2019-22830)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat/Reader has an out-of-bounds read vulnerability. An attacker can exploit this vulnerability to obtain information...

Google Chrome PDFium Resource Management Error Vulnerability

Google Chrome is a web browser from Google, an American company. PDFium is one of the open source PDF rendering engine.PDFium in versions prior to Google Chrome 74.0.3729.108 suffers from a Resource Management Error vulnerability, which arises from mismanagement of system resources e.g., memory,...

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2019-12283)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat and Reader have an out-of-bounds read vulnerability. An attacker can exploit this vulnerability to obtain information...

UBUNTU-CVE-2019-1786

A vulnerability in the Portable Document Format PDF scanning functionality of Clam AntiVirus ClamAV Software versions 0.101.1 and 0.101.0 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a lack of proper...