CVE-2020-29599

A flaw was found in ImageMagick. The -authenticate option is mishandled allowing user-controlled password set for a PDF file to possibly inject additional shell commands via coders/pdf.c. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

KLA12028 Multiple vulnerabilities in Foxit Reader and Foxit PhantomPDF

Multiple vulnerabilities were found in Foxit Reader and Foxit PhantomPDF. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in PDF file can be exploited remotely to...

Denial Of Service (DoS)

MuPDF is vulnerable to denial of service. The vulnerability allows remote attackers to cause a denial of service via a crafted pdf file...

Denial Of Service (DoS)

mupdf is vulnerable to denial of service. The fzappendbyte function in fitz/buffer.c due to an array-index underflow allows remote attackers to cause a denial of service through a segmentation fault via a malicious pdf file...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. A buffer overflow in pprintimage in devices/gdevcdj.c allows a remote attacker to cause a denial of service via a malicious PDF file...

Buffer Overflows

GhostScript is vulnerable to buffer overflows. A remote attacker could cause a buffer overflow in jetp3852printpage in devices/gdev3852.c via a crafted PDF file resulting in memory corruption...

Denial Of Service (DoS)

Artifex Software GhostScript is vulnerable to denial of service attacks. A remote attacker could cause buffer overflows in tiff12printpage in devices/gdevtfnx.c via a crafted PDF file resulting in denial of service conditions...

Denial Of Service (DoS)

Artifex Software GhostScript is vulnerable to denial of service attacks. A remote attacker could cause buffer overflows in mjcolorcorrect in contrib/japanese/gdevmjc.c via a crafted PDF file resulting in denial of service conditions...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. A Division by Zero vulnerability in bj10vprintpage in contrib/japanese/gdev10v.c allows a remote attacker to cause a denial of service via a malicious PDF file...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. A buffer overflow in GetNumWrongData in contrib/lips4/gdevlips.c allows a remote attacker to cause a denial of service via a malicious PDF file...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. A buffer overflow in FloydSteinbergDitheringC in contrib/gdevbjca.c allows a remote attacker to crash the application via a malicious PDF file...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service DoS. The vulnerability exists due to the heap-buffer-overflow in the lprnisblack function in contrib/lips4/gdevlprn.c, allowing an attacker to crash the application via a crafted PDF file...

Buffer Overflow

GhostScript is vulnerable to buffer overflow. This vulnerability exists due to a buffer overflow in pjcommonprintpage in devices/gdevpjet.c which allows an attacker to cause a denial of service via a maliciously crafted PDF file...

CVE-2020-16289

Artifex Software GhostScript is vulnerable to denial of service attacks. A remote attacker could cause buffer overflows in cifprintpage in devices/gdevcif.c via a crafted PDF file resulting in denial of service conditions...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. Incorrect object lifecycle handling allows a remote attacker to potentially exploit heap corruption via a malicious PDF file...

Arbitrary Code Execution

chromium is vulnerable to arbtirary code execution. Inappropriate memory management during caching allows a remote attacker to execute arbitrary code inside a sandbox via a malicious PDF file...

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

USN-4646-2: poppler regression

USN-4646-1 fixed vulnerabilities in poppler. The fix for CVE-2019-10871 introduced a regression causing certain applications linked against poppler to fail. This update backs out the fix pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovere...

Ubuntu 16.04 LTS / 18.04 LTS : poppler vulnerabilities (USN-4646-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4646-1 advisory. It was discovered that Poppler incorrectly handled certain files. If a user or automated system were tricked into opening a crafted PDF file,...