The vulnerability of the vector graphics editor CorelDRAW Graphics Suite (formerly CorelDRAW) lies in the ability to read data beyond the buffer boundaries in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the CorelDRAW Graphics Suite formerly CorelDRAW graphic editor relates to reading data beyond the buffer boundaries in memory during PDF file parsing. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information by opening a specially...

MuhammaraJS 代码问题漏洞

MuhammaraJS is a node module with c/cpp bindings by the individual developer Julian Hille. A security vulnerability exists in MuhammaraJS versions prior to 2.6.0. An attacker exploited the vulnerability to cause a denial of service via a specially crafted PDF file...

PT-2022-24941 · Npm · Muhammara +1

Name of the Vulnerable Software and Affected Versions: muhammara versions prior to 2.6.0 hummus affected versions not specified Description: The issue is related to a Denial of Service DoS condition that occurs when a maliciously crafted PDF file is supplied to be appended to another. This can...

MuhammaraJS 安全漏洞

MuhammaraJS is a node module with c/cpp bindings from the individual developer Julian Hille. A security vulnerability exists in MuhammaraJS versions prior to 2.6.0 and 3.1.0 through 3.1.1, which stems from a denial of service that can be caused by an attacker parsing its hummus package via a...

The vulnerability of the PDFium component in the Google Chrome browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the PDFium component in the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created PD...

SAP 3D Visual Enterprise Author 缓冲区错误漏洞

SAP 3D Visual Enterprise Author is a desktop application from SAP Germany for managing 2D, 3D, animation, video and audio assets. SAP 3D Visual Enterprise Author suffers from a buffer overflow vulnerability that stems from a lack of proper memory management and can be exploited by an attacker to...

CVE-2022-33885

A maliciously crafted XB, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution...

CVE-2022-33885

A maliciously crafted XB, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution...

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. A buffer error vulnerability exists in Autodesk AutoCAD that stems from parsing maliciously crafted XB, CATIA, and PDF files can be used to write to a buffer that exceeds the allocated buffer,...

PT-2022-21888 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD version 2023 Description: The issue arises when a maliciously crafted PDF file is parsed through the software, leading to an unhandled exception. This can be exploited by an attacker to cause a crash, read sensitive data, or...

DEBIAN-CVE-2022-3196

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

UBUNTU-CVE-2022-3197

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

UBUNTU-CVE-2022-3196

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

SWFTools 缓冲区错误漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that stems from a segmentation violation in the InfoOutputDev::type3D1 location of /pdf/InfoOutputDev.cc...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome that originates from a memory reuse after release situation in PDF...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome that originates from a memory reuse after release situation in PDF...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the JBIG2 decoder JBIG2Stream::readTextRegionSeg in JBIGStream.cc. Exploiting this vulnerability is possible by processing a specially crafted PDF file or JBIG2 image. Remediation Upgrade poppler to...

Vulnerability of PDF-content handling browsers Google Chrome and Microsoft Edge, allowing attackers to execute arbitrary code

The vulnerability of PDF-content handling browsers like Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created website...

The vulnerability of the PDF-XChange PDF document viewing and editing program lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing and editing software PDF-XChange lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malicious J2K file...

ImageMagick 输入验证错误漏洞

ImageMagick is a set of open-source image processing software from the American company ImageMagick. The software can read, convert, or write images in a variety of formats. ImageMagick has a security vulnerability, the vulnerability stems from its MagickCore/quantum-export.c component of the...