Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00266)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00265)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-00240)

Microsoft Office is an office software suite based on the Windows operating system. Microsoft Office suffers from a memory corruption vulnerability that can be exploited by remote attackers to execute arbitrary code by constructing special Office documents...

Adobe Reader Memory Error Remote Code Execution Vulnerability

Adobe Reader is PDF document reading software. Adobe Reader has a security vulnerability when handling malformed ExtGState dictionaries within PDF documents. It can lead to a double release. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current process...

Microsoft Edge TextData Type Confusion Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose the contents of memory on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PhantomPDF Arbitrary Code Execution Vulnerability

Foxit PhantomPDF is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Google Chrome Cross-Site Scripting Vulnerability (CNVD-2015-08389)

Google Chrome is a simple and efficiently designed web browsing tool developed by Google. A cross-site scripting vulnerability exists in versions of Google Chrome prior to 47.0.2526.80. It allows remote attackers to inject arbitrary web script or HTML crafted documents via crafted documents...

The vulnerabilities of Debian GNU/Linux operating systems, Ubuntu, office software packages such as LibreOffice and Apache OpenOffice, allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of Debian GNU/Linux operating systems, Ubuntu, office software packages like LibreOffice and Apache OpenOffice is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code using specially...

The vulnerabilities of Debian GNU/Linux operating systems, Ubuntu, office software packages such as LibreOffice and Apache OpenOffice, allow attackers to gain access to protected information.

The vulnerability of Debian GNU/Linux operating systems, Ubuntu, office software packages like LibreOffice and Apache OpenOffice is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected...

USN-2834-1 libxml2 vulnerabilities

Kostya Serebryany discovered that libxml2 incorrectly handled certain malformed documents. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause libxml2 to crash, resulting in a denial of service. CVE-2015-5312, CVE-2015-7497,...

libreoffice: Arbitrary file disclosure in Calc and Writer

It was discovered that LibreOffice did not properly restrict automatic link updates. By tricking a victim into opening specially crafted documents, an attacker could possibly use this flaw to disclose contents of files accessible by the victim...

chromium-browser: Escaping issue in saved pages

The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as...

libxml2: Heap-based buffer overflow in xmlParseXmlDecl

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash...

Threat Outbreak Alert RuleID19624: Email Messages Distributing Malicious Software on November 24, 2015

Medium Alert ID: 42250 First Published: 2015 November 24 13:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19624 may contain the following files: Name |...

Carnegie Mellon Says It Was Subpoenaed-And Not Paid-For Research On Breaking Tor

Carnegie Mellon University today implied in a statement that it was served with a subpoena to hand over research related to unmasking the identity of users on the Tor network, and that it was not paid $1 million by the FBI for doing so, as alleged by the Tor Project. The statement, released short...

Microsoft Word Arbitrary Code Execution Vulnerability (CNVD-2015-07571)

Microsoft Word is a word processing tool in the Office suite of software from Microsoft. Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3,Word Viewer version suffers from an arbitrary code execution The vulnerabilit...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2015-07430)

Mozilla Firefox is an open source web browser. A security vulnerability exists in the Mozilla Firefox Search feature, which allows attackers to read log files and access file: URLs of HTML documents...

USN-2793-1 libreoffice vulnerabilities

Federico Scrinzi discovered that LibreOffice incorrectly handled documents inserted into Writer or Calc via links. If a user were tricked into opening a specially crafted document, a remote attacker could possibly obtain the contents of arbitrary files. CVE-2015-4551 It was discovered that...

Design/Logic Flaw

The Search feature in Mozilla Firefox before 42.0 on Android through 4.4 supports search-engine URL registration through an intent and can access this URL in a privileged context in conjunction with the crash reporter, which allows attackers to read log files and visit file: URLs of HTML document...

CVE-2015-7190

The Search feature in Mozilla Firefox before 42.0 on Android through 4.4 supports search-engine URL registration through an intent and can access this URL in a privileged context in conjunction with the crash reporter, which allows attackers to read log files and visit file: URLs of HTML document...