259 matches found
CVE-2019-9848
LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc. LibreOffice is typically also bundled with LibreLogo, a programmable turtle vector graphics script, which can be manipulated into executing arbitrar...
UBUNTU-CVE-2019-9848
LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc. LibreOffice is typically also bundled with LibreLogo, a programmable turtle vector graphics script, which can be manipulated into executing arbitrar...
CB TAU Threat Intelligence Notification: Emotet Utilizing WMI to Launch PowerShell Encoded Code
Carbon Black recently learned that a customer had received a malicious email, which was written in German and was attached with a password-protected zip file that contained a malicious document file. This phishing email belongs to the recent Emotet campaign. However, what makes this malware uniqu...
Vulnerability of the Windows Graphics Device Interface component of the Windows operating system, allowing a hacker to execute arbitrary code
The vulnerability of the Windows Graphics Device Interface GDI component of the operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page or...
Foxit Reader and PhantomPDF Input Validation Vulnerability (CNVD-2019-08301)
Foxit Reader for Windows is China's Foxit Foxit software company's a Windows-based platform for PDF document reader. PhantomPDF for Windows is its commercial version. An input validation vulnerability exists in the processing of PDF files in Foxit Reader 9.3.0.10826 and earlier versions and...
PT-2019-6286 · Poppler +7 · Poppler +7
Name of the Vulnerable Software and Affected Versions: Poppler affected versions not specified Description: A flaw was found in the way certain PDF files were converted into HTML, allowing a remote attacker to exploit this flaw by providing a malicious PDF file that, when processed by the...
PT-2019-18295 · Foxit · Foxit Reader
Name of the Vulnerable Software and Affected Versions: Foxit Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a...
A use cve-2017-11882 and cve-2018-0802 combination of vulnerability a malicious document analysis-vulnerability warning-the black bar safety net
! Recently intercepted an extension doc word document to attack the samples, which format is actually RTF format. By analyzing the document composition the use of a cve-2017-11882 and cve-2018-0802 vulnerability, and use the embedded excel object is used to trigger the vulnerability. The release ...
The vulnerability of the Word document processor, the Atlantis Word Processor, allows a hacker to execute arbitrary code.
The vulnerability of the Atlantis Word Processor document processing tool is caused by indexing errors in arrays. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the application, using a specially created document...
CVE-2018-3964
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the...
PT-2018-16364 · Atlantis · Atlantis Word Processor
Name of the Vulnerable Software and Affected Versions: Atlantis Word Processor version 3.2.5.0 Description: A stack-based buffer overflow issue exists in the JPEG parser. It can be triggered by a specially crafted image embedded within a document, causing a length miscalculation and underflow. Th...
AntennaHouse DMC HTMLFilter Arbitrary Code Execution Vulnerability
AntennaHouse DMC HTMLFilter is a tool that can be integrated into other software to convert doc and other files into html format files. A security vulnerability exists in the DHFSummary feature of AntennaHouse DMC HTMLFilter. The vulnerability can be exploited by a remote attacker to execute...
CVE-2016-8383
An exploitable heap corruption vulnerability exists in the DocGetFontTable functionality of AntennaHouse DMC HTMLFilter. A specially crafted doc file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious doc file to trigger this vulnerability...
Heap overflow
An exploitable heap corruption vulnerability exists in the DocGetFontTable functionality of AntennaHouse DMC HTMLFilter. A specially crafted doc file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious doc file to trigger this vulnerability...
PT-2018-16236 · Foxit · Foxit Pdf Reader
Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 9.0.1.1049 Description: The issue is related to an uninitialized pointer in the JavaScript engine. A specially crafted PDF document can cause a dereference of this pointer, potentially leading to arbitrary code...
Hackers Exploit Recently Disclosed Microsoft Office Bug to Backdoor PCs
A recently disclosed severe 17-year-old vulnerability in Microsoft Office that lets hackers install malware on targeted computers without user interaction is now being exploited in the wild to distribute a backdoor malware. First spotted by researchers at security firm Fortinet, the malware has...
The vulnerability of the Windows operating system’s font library, allowing a hacker to execute arbitrary code
The vulnerability of the Windows operating system’s font library is related to improper handling of fonts. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created website or document...
Microsoft Office WordPerfect Document Converter Heap-based Buffer Overflow (CVE-2017-8744)
A heap-based buffer overflow vulnerability exist in WordPerfect Document Converter component of Microsoft Office. The vulnerability is due to improper validation of the document data prior to copying it to a heap-based buffer. A remote attacker could exploit the vulnerability by enticing a victim...
AntennaHouse DMC HTMLFilter Doc_SetSummary Code Execution Vulnerability(CVE-2016-8382)
Summary An exploitable heap corruption vulnerability exists in the DocSetSummary functionality of AntennaHouse DMC HTMLFilter. A specially crafted doc file can cause a heap corruption resulting in arbitrary code execution. An attacker can send a malicious doc file to trigger this vulnerability...