1331 matches found
PT-2016-4135
Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277, CVE-2016-0278, and CVE-2016-0279...
CVE-2016-0301: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277, CVE-2016-0278, and CVE-2016-0279...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.
The vulnerability of the core/fxge/ge/fxgetext.cpp file of the Google Chrome browser’s PDFium component is related to the improper handling of certain index values. Exploiting this vulnerability can allow an attacker to trigger a service failure memory overflow during reading using a specially...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.
The vulnerability of the opjj2kreadSPCodSPCoc function in the j2k.c module of the OpenJPEG module for the PDFium browser in Google Chrome is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause service interruptions or other effects...
Information disclosure
Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka "Windows PDF Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3201...
CVE-2016-3203: Improper Input Validation
Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to execute arbitrary code via a crafted PDF document, aka "Windows PDF Remote Code Execution Vulnerability."...
PT-2016-2185
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1, 10 1511 Microsoft Edge Microsoft Windows Server versions 2012 Gold and R2 Description The issue is related to a lack of protection for service data in Microsoft Windows and the Microsoft Edge browser. Exploitati...
Microsoft Windows PDF Library Information Disclosure (MS16-080: CVE-2016-3201)
An out of bound memory access vulnerability was discovered within Microsoft Edge PDF reader and Windows PDF Library. The vulnerability is due to an error in parsing a malformed PDF document. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted PDF file...
PT-2016-2191
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1, 10 Gold, and 10 1511 Microsoft Edge affected versions not specified Windows Server versions 2012 Gold and 2012 R2 Description The issue exists due to insufficient input validation in Microsoft Windows and the...
CVE-2016-1686
The CPDFDIBSource::CreateDecoder function in core/fpdfapi/fpdfrender/fpdfrenderloadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles decoder-initialization failure, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...
CVE-2016-1685
core/fxge/ge/fxgetext.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...
CVE-2016-1686
The CPDFDIBSource::CreateDecoder function in core/fpdfapi/fpdfrender/fpdfrenderloadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles decoder-initialization failure, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...
UBUNTU-CVE-2016-1681
Heap-based buffer overflow in the opjj2kreadSPCodSPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...
CVE-2016-1685
core/fxge/ge/fxgetext.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...
CVE-2016-1686
Removed by vendor...
CVE-2016-1685: Improper Restriction of Operations within the Bounds of a Memory Buffer
core/fxge/ge/fxgetext.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...
CVE-2016-1686: Improper Restriction of Operations within the Bounds of a Memory Buffer
The CPDFDIBSource::CreateDecoder function in core/fpdfapi/fpdfrender/fpdfrenderloadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles decoder-initialization failure, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...
chromium-browser: out-of-bounds read in pdfium
core/fxge/ge/fxgetext.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...
KLA10816 Multiple vulnerabilities in Google Chrome
Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, obtain sensitive information or conduct another unknown impact. Below is a complete list of vulnerabilities: 1. Multiple...
CVE-2015-8868
Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service memory corruption and crash or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF...