CVE-2021-29421

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...

DEBIAN-CVE-2021-29421

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...

UBUNTU-CVE-2021-29421

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...

CVE-2021-29421

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...

PYSEC-2021-34

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...

jbarlow83 pikepdf 代码问题漏洞

jbarlow83 pikepdf is a jbarlow83 open source application . A Python library for reading and writing PDF files . A security vulnerability exists in pikepdf package 1.3.0 through 2.9.2, which stems from allowing XXE when parsing XMP metadata items...

CVE-2021-29421

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...

Dhowden Tag Input Validation Error Vulnerability

Dhowden Tag is a Go-based MP3/MP4/OGG/FLAC metadata parsing library from the Dhowden personal developers. A security vulnerability exists in versions of dhowden tag prior to 2020-11-19, which allows parsing of MP3/MP4/OGG/FLAC metadata via readAtomData "panic: runtime error: slice bounds out of...

Dhowden Tag Input Validation Error Vulnerability

Dhowden Tag is a Go-based MP3/MP4/OGG/FLAC metadata parsing library by the Dhowden personal developer. A security vulnerability exists in dhowden tag versions prior to 2020-11-19, which allows "panic: runtime error: index out of range" to be passed through readPICFrame...

CVE-2020-15365

LibRaw before 0.20-Beta3 has an out-of-bounds write in parse_exif() inside metadata\exif_gps.cpp caused by an unrecognized AtomName and a zero value of tiff_nifds. Several connected sources corroborate this CVE-2020-15365, with no public details on exploitability or vendor patch information in th...

CVE-2019-11931

A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS or RCE. This affects Android versions prior to 2.19.274, iOS versions...

Adobe Flash - Metadata Parsing Out-of-Bounds Read

Adobe Flash - Metadata Parsing Out-of-Bounds Read Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1005 The attached file causes an out-of-bounds read when its metadata is parsed Proof of Concept:...

Adobe Flash - Metadata Parsing Out-of-Bounds Read Exploit

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1005 The attached file causes an out-of-bounds read when its metadata is parsed Proof of Concept:...

Adobe Flash: Out-of-Bounds Read in Metadata Parsing（CVE-2017-2931）

The attached file causes an out-of-bounds read when its metadata is parsed Attachment: meta. swf...

Adobe Flash - Metadata Parsing Out-of-Bounds Read

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1005 The attached file causes an out-of-bounds read when its metadata is parsed Proof of Concept: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/41608.zip...

Flash Player Code Execution

The vulnerability of the Flash Player software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption as a result of parsing metadata remotely...

PDF viewer Code Execution

The vulnerability in the PDF viewer software such as Adobe Reader, Document Cloud, and Adobe Acrobat lies in the execution of arbitrary code by a remote attacker after an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code throu...

tika: XML External Entity vulnerability

It was found that the parsing of OOXML, XMP in PDF, and some other file formats by Apache Tika would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XX...

flash-plugin: multiple code execution issues fixed in APSB17-02

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to the parsing of SWF metadata. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2960

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of EXIF metadata. Successful exploitation could lead to arbitrary code execution...