Lucene search
+L

1751 matches found

CNVD
CNVD
added 2019/03/29 12:00 a.m.10 views

Clam AntiVirus Buffer Overflow Vulnerability

Clam AntiVirus is an open source antivirus engine from the ClamAV team for detecting Trojans, viruses, malware and other malicious threats. A buffer error vulnerability exists in the PDF scanning feature in Clam AntiVirus versions 0.101.1 and 0.101.0. The vulnerability originates when a networked...

7.5CVSS9AI score0.01491EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/03/15 12:00 a.m.8 views

PT-2019-6287 · Poppler +5 · Poppler +5

Name of the Vulnerable Software and Affected Versions: Poppler version 0.74.0 Description: The issue is related to the function Dict::find in the Dict.cc component of the Poppler library, which is used for displaying PDF files. It is caused by the PDFDoc::markObject function in PDFDoc.cc...

9.8CVSS5.9AI score0.03518EPSS
SaveExploits25References200
OSV
OSV
added 2019/03/13 10:29 p.m.10 views

CVE-2019-6601

In BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application Acceleration Manager AAM wamd process used in processing of images and PDFs fails to drop group permissions when executing helper scripts...

5.5CVSS6.1AI score0.00322EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/03/12 12:00 a.m.12 views

The vulnerability of the Ghostscript software for document processing, conversion, and generation arises from operations that go beyond buffer boundaries in memory, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the software for processing, transforming, and generating Ghostscript documents arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibilit...

7.8CVSS7.6AI score0.01745EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2019/03/11 11:58 a.m.7 views

USN-3905-1 poppler vulnerability

It was discovered that poppler incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service...

8.8CVSS7.2AI score0.03473EPSS
SaveExploits1References2
CNVD
CNVD
added 2019/03/07 12:00 a.m.14 views

Denial of service vulnerability in Viscom Softwares pdf viewer activex control

Viscom Softwares pdf viewer activex control is a popular PDF viewing and printing control. A denial of service vulnerability exists in the Viscom Softwares pdf viewer activex control. An attacker can exploit this vulnerability to cause a denial of service by constructing a specific pdf file...

6.7AI score
SaveExploits0
OSV
OSV
added 2019/02/26 11:29 p.m.7 views

DEBIAN-CVE-2019-9200

A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impa...

8.8CVSS7.5AI score0.03473EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/01/30 12:00 a.m.4 views

Foxit 3D Plugin Beta Buffer Overflow Vulnerability

Foxit Reader is a Chinese Foxit Foxit software company of a PDF document reader.Foxit PhantomPDF is a commercial version.Foxit 3D Plugin Beta is one of the 3D plugin. A buffer overflow vulnerability exists in versions prior to Foxit 3D Plugin Beta 9.4.0.16807 for Foxit Reader and PhantomPDF. An...

5.5CVSS7AI score0.02512EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/01/30 12:00 a.m.10 views

Foxit 3D Plugin Beta Integer Overflow Vulnerability

Foxit Reader is a Chinese Foxit Foxit software company of a PDF document reader.Foxit PhantomPDF is a commercial version.Foxit 3D Plugin Beta is one of the 3D plugin. An integer overflow vulnerability exists in versions prior to Foxit 3D Plugin Beta 9.4.0.16807 for Foxit Reader and PhantomPDF. An...

6.5CVSS6.8AI score0.01117EPSS
SaveExploits0References1
OSV
OSV
added 2019/01/28 9:29 a.m.7 views

CVE-2019-6983

An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Integer Overflow and crash during the handling of certain PDF files that embed specifically crafted 3D content, because of a free of valid memory...

6.5CVSS6.6AI score0.01117EPSS
SaveExploits0References1
OSV
OSV
added 2019/01/28 9:29 a.m.8 views

CVE-2019-6982

An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Out-of-Bounds Write and crash during the handling of certain PDF files that embed specifically crafted 3D content, because of the improper handling of a logic...

5.5CVSS6.1AI score0.02512EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/01/11 12:00 a.m.9 views

Google Chrome PDFium Out-of-Bounds Memory Access Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. Google Chrome 51.0.2704.63 previous version of PDFium security vulnerabilities, the vulnerability stems from the program failed to adequately verify the image...

8.8CVSS8.9AI score0.00794EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/01/04 12:00 a.m.14 views

Foxit Reader and PhantomPDF for Windows Validation Bypass Vulnerability

Foxit Reader for Windows is China's Foxit Foxit software company's a Windows-based platform for PDF document reader. PhantomPDF for Windows is its commercial version. A validation bypass vulnerability exists in Foxit Reader 9.3.0.10826 and earlier versions and PhantomPDF 9.3.0.10826 and earlier...

5.3CVSS6.8AI score0.01133EPSS
SaveExploits0References1
OSV
OSV
added 2019/01/03 1:29 p.m.5 views

DEBIAN-CVE-2018-20662

In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing...

6.5CVSS7.2AI score0.02262EPSS
SaveExploits0References1
OSV
OSV
added 2019/01/02 6:29 p.m.8 views

DEBIAN-CVE-2018-19478

In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file...

5.5CVSS6.9AI score0.01888EPSS
SaveExploits0References1
OSV
OSV
added 2019/01/02 6:29 p.m.13 views

UBUNTU-CVE-2018-19478

In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file...

5.5CVSS6.8AI score0.01888EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/12/29 12:00 a.m.31 views

Artifex Software Ghostscript Denial of Service Vulnerability (CNVD-2018-26917)

Artifex Software Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. print Postscript files on...

5.5CVSS6.7AI score0.01888EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:00 a.m.13 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat, Adobe Reader, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud involve memory management issues after the memory is freed. These vulnerabilities allow attackers to exploit these weaknesses and execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat, Adobe Reader, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow attackers to enhance their privileges and execu...

9.3CVSS7.7AI score0.04181EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:00 a.m.16 views

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Reader, and Adobe Acrobat Document Cloud, related to the manipulation of the zero pointer, allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat, Adobe Reader, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud are related to the manipulation of the zero pointer. Exploiting these vulnerabilities can allow attackers to execute arbitrary code remotely,...

9.3CVSS7.6AI score0.27967EPSS
SaveExploits0References4
CNVD
CNVD
added 2018/12/12 12:00 a.m.6 views

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2019-12289)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have an out-of-bounds read vulnerability. An attacker can exploit this vulnerability to obtain information...

6.5CVSS6.6AI score0.03774EPSS
SaveExploits0References1
Rows per page
Query Builder