The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat, Adobe Acrobat Document Cloud allow attackers to execute arbitrary code.

The vulnerability of JavaScript programs for viewing PDF files, such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, arises due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerabili...

DEBIAN-CVE-2017-8054

The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service infinite recursion and application crash via a crafted PDF document...

UBUNTU-CVE-2017-8054

The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service infinite recursion and application crash via a crafted PDF document...

UBUNTU-CVE-2017-8053

PoDoFo 0.9.5 allows denial of service infinite recursion and stack consumption via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure PdfParser.cpp...

CVE-2017-3017

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability when handling a malformed PDF file. Successful exploitation could lead to arbitrary code execution...

[SECURITY] Fedora 26 Update: ghostscript-9.20-8.fc26

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...

[SECURITY] Fedora 25 Update: ghostscript-9.20-7.fc25

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...

PoDoFo Denial of Service Vulnerability (CNVD-2017-04562)

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability exists in PdfFontFactory.cpp:195:62 code in PoDoFo version 0.9.5 that allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted P...

DEBIAN-CVE-2017-7379

The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF document...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document. Remediation There is no fixed...

UBUNTU-CVE-2016-10220

The gsmakewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file that is mishandled in the PDF Transparency module...

The vulnerability of the Windows operating system and the Microsoft Edge browser allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows operating system’s PDF library, specifically Microsoft Edge browsers, arises due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created Microsoft...

CVE-2017-0023

The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted PDF file, aka "Microsoft PDF Remote Code Execution Vulnerability."...

Microsoft Windows PDF Memory Corruption Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. PDF library is one of the PDF library. A memory corruption vulnerability exists in Microsoft Windows PDF. A remote attacker could exploit this vulnerability to build a malicious web page, which could ...

Iceni Argus Memory Corruption Vulnerability

Iceni Argus is the British Iceni company's set of PDF document type conversion tool. Iceni Argus processing special PDF files have a security vulnerability, allowing attackers can exploit the vulnerability to build malicious PDF files, inducing the user to parse, can make the application crash...

CVE-2016-8389

An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will attempt to convert each character from a font into a polygon and then attempt to rasterize these shapes. As the application attempts to iterate through the rows and...

CVE-2016-8715

An exploitable heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. A specially crafted PDF file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide a malicious PDF file to trigger this vulnerability...

PT-2017-9655 · Iceni · Iceni Argus

Name of the Vulnerable Software and Affected Versions: Iceni Argus affected versions not specified Description: An integer-overflow issue exists when Iceni Argus attempts to convert a malformed PDF to XML. The application tries to convert each character from a font into a polygon and then rasteri...

PT-2017-9652 · Iceni · Iceni Argus

Name of the Vulnerable Software and Affected Versions: Iceni Argus affected versions not specified Description: An exploitable heap-based buffer overflow exists in the software. When it attempts to convert a PDF containing a malformed font to XML, the tool will attempt to use a size out of the fo...

Nitro Pro Remote Code Execution Vulnerability

Nitro Pro is a U.S. company Nitro PDF production and management software. A remote code execution vulnerability exists in the PDF parsing feature of Nitro Pro 10. An attacker could exploit the vulnerability to send a specific PDF file to the victim, leading to potential code execution...