404 matches found
CVE-2017-14544
CVE-2017-14544 affects STDU Viewer 1.6.375. The vulnerability is a buffer overflow triggered by a crafted .epub file in which data from a faulting address is used in a call sequence starting at STDUEPubFile!DllUnregisterServer, enabling denial of service and potentially unspecified impact. No exp...
CVE-2017-14542
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .epub file, related to a "Read Access Violation on Block Data Move starting at STDUEPubFile!DllUnregisterServer+0x0000000000010262."...
CVE-2017-14545
STDU Viewer 1.6.375 is affected by a vulnerability described across multiple sources as a buffer overflow in EPUB handling. The issue appears to be triggered by processing a specially crafted .epub file, with the root cause tied to memory/branch handling in the STDUEPubFile!DllUnregisterServer+0x...
CVE-2017-14545
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address controls Branch Selection starting at STDUEPubFile!DllUnregisterServer+0x0000000000010332."...
CVE-2017-14544
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...
CVE-2017-14543
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address controls Branch Selection starting at STDUEPubFile!DllUnregisterServer+0x0000000000039335."...
CVE-2017-14542
STDU Viewer 1.6.375 contains a buffer overflow vulnerability (per CNVD-2017-30441) that a local attacker can exploit by processing a specially crafted .epub file, potentially leading to arbitrary code execution or a denial of service. The connected CNVD entry confirms the issue in STDU Viewer and...
CVE-2017-14543
CVE-2017-14543 affects STDU Viewer 1.6.375. A crafted .epub can cause a denial of service or possibly other unspecified impact due to Data from Faulting Address controlling Branch Selection at STDUEPubFile!DllUnregisterServer+0x0000000000039335. The connected sources confirm the product/version a...
Adobe Digital Editions ePub Font Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Digital Editions. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
Adobe Digital Editions ePub JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Digital Editions. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...
[SECURITY] Fedora 26 Update: FlightCrew-0.9.1-7.fc26
FlightCrew is a C++ epub validator...
[SECURITY] Fedora 25 Update: FlightCrew-0.9.1-7.fc25
FlightCrew is a C++ epub validator...
[SECURITY] Fedora 24 Update: FlightCrew-0.9.1-7.fc24
FlightCrew is a C++ epub validator...
iBooks information disclosure(CVE-2017-2497)
What's ePub file? EPUB is an e-book file format with the extension .epub that can be downloaded and read on devices like smartphones, tablets, computers, or e-readers. And in technical implementation An EPUB file is a ZIP archive that contains, in effect, a website—including HTML files, images, C...
macOS iBooks Parsing a maliciously crafted iBooks file lead to local file disclosure（CVE-2017-2426）
On a previous post about ePub parsers This book reads you - exploiting services and readers that support the ePub book format, I mentioned using scripting capabilities in ePub to perform local attacks against users. Apple just released a fix for one issue I reported last year in iBooks that allow...
Code injection
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...
CVE-2016-10187
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...
CVE-2016-10187
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...
