CVE-2016-6077

IBM Cognos Disclosure Management 10.2 could allow a malicious attacker to execute commands as a lower privileged user that opens a malicious document. IBM Reference : 1991584...

Information disclosure

IBM Cognos Disclosure Management 10.2 could allow a malicious attacker to execute commands as a lower privileged user that opens a malicious document. IBM Reference : 1991584...

poppler: heap buffer overflow in ExponentialFunction

A heap-buffer overflow was found in the poppler library. An attacker could create a malicious PDF file that would cause applications that use poppler such as Evince to crash or, potentially, execute arbitrary code when opened...

Apple macOS Sierra ImageIO Over-the-Border Write Vulnerability

Apple macOS Sierra is a specialized operating system developed for Mac computers. An out-of-bounds write vulnerability exists in ImageIO in Apple macOS Sierra, which allows local attackers to exploit the vulnerability to build malicious PDFs that can be tricked into parsing by an application,...

Multiple Apple products libarchive file modification vulnerability

Apple iOS is an operating system developed for mobile devices; tvOS is a smart TV operating system; watchOS is a smart watch operating system. libarchive is a multi-format archive and compression library component. A security vulnerability exists in libarchive in several Apple products. An attack...

Adobe Reader and Acrobat Memory Error Referencing Code Execution Vulnerability (CNVD-2016-08954)

Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDFs. A memory misreference vulnerability exists in Adobe Reader and Acrobat, which allows remote attackers to exploit the...

Hancitor (AKA Chanitor) observed using multiple attack approaches

Many threat actors use multiple attack vectors to ensure success. The individuals using Hancitor malware also known by the name Chanitor are no exception and have taken three approaches to deliver the malware in order to ultimately steal data from their victims. These techniques include uncommon...

File Roller 'src/file-utils.c' Directory Traversal Vulnerability

File Roller is for the Gnome desktop environment provides a graphical interface to operate the compressed, archived files, similar to the KDE desktop environment, Ark. A target traversal vulnerability exists in File Roller 3.5.4-3.20.2. If the target user opens a malicious document, it can cause...

Adobe Acrobat Reader XFA FormCalc replace Integer Overflow (CVE-2016-1043)

An integer overflow vulnerability exists in Adobe Acrobat Reader. The vulnerability is due to improper validation of the parameters for a certain function. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted document. Successful exploitation of the...

Adobe Acrobat/Reader Javascript API Execution Bypass Vulnerability (CNVD-2015-06719)

Adobe Reader/Acrobat is a popular application for working with PDF files. An unspecified security bypass vulnerability exists in Adobe Reader/Acrobat. The vulnerability allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could bypass Javascript API...

Adobe Acrobat/Reader Memory Misreference Vulnerability (CNVD-2015-06684)

Adobe Reader/Acrobat is a popular application for working with PDF files. An unspecified memory misreference vulnerability exists in Adobe Reader/Acrobat. This allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could crash the application or execute...

Adobe Acrobat/Reader Javascript API Execution Bypass Vulnerability (CNVD-2015-06715)

Adobe Reader/Acrobat is a popular application for working with PDF files. An unspecified security bypass vulnerability exists in Adobe Reader/Acrobat. The vulnerability allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could bypass Javascript API...

Adobe Acrobat/Reader Javascript API Execution Bypass Vulnerability (CNVD-2015-06697)

Adobe Reader/Acrobat is a popular application for working with PDF files. An execution bypass vulnerability exists in Adobe Reader/Acrobat. Allows an attacker to construct a malicious PDF file and trick the user into parsing it, which can bypass Javascript API execution restrictions...

Adobe Acrobat/Reader Bypass Information Disclosure Vulnerability (CNVD-2015-06736)

Adobe Reader/Acrobat is a popular application for working with PDF files. Adobe Reader/Acrobat suffers from a bypass information disclosure vulnerability that allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could lead to sensitive information...

Adobe Acrobat/Reader Bypass Information Disclosure Vulnerability (CNVD-2015-06733)

Adobe Reader/Acrobat is a popular application for working with PDF files. An information disclosure bypass vulnerability exists in Adobe Reader/Acrobat. Allowing an attacker to construct a malicious PDF file and trick the user into parsing it, sensitive information can be obtained...

Adobe Acrobat/Reader Javascript API Execution Bypass Vulnerability (CNVD-2015-06690)

Adobe Reader/Acrobat is a popular application for working with PDF files. An execution bypass vulnerability exists in Adobe Reader/Acrobat. Allows an attacker to construct a malicious PDF file and trick the user into parsing it, which can bypass Javascript API execution restrictions...

Apple iOS ICC Profile Handling Memory Corruption Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Apple iOS's handling of ICC files, which allows attackers to construct malicious PDF files and trick users into parsing them, which can execute arbitrary code...

Malicious Microsoft Office Documents: Generate-Macro

This script will generate malicious Microsoft Excel Documents that contain VBA macros. This script will prompt you for an IP address and port you will receive your shell at this address and port and the name of the malicious document. From there, the script will then prompt you to choose from a...

Updated qt3 packages fix security vulnerabilities

Updated qt3 packages fix security vulnerabilities: QXmlSimpleReader in Qt versions prior to 5.2 supports expansion of internal entities in XML documents without placing restrictions to ensure the document does not cause excessive memory usage. If an application using this API processes untrusted...

Threat Outbreak Alert: Fake Bank Document Delivery Email Messages on February 20, 2014

Medium Alert ID: 32940 First Published: 2014 February 20 17:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank document for the recipient. The text in the email message attempts to convince the recipient to open t...