2604 matches found
Nitro Pro PDF Reader JavaScript API Remote Code Execution (CVE-2017-7442)
A Remote Code Execution Vulnerability exists in JavaScript API of Nitro and Nitro Pro PDF Reader. The vulnerability is due to the use of trusted function which provides certain privileges that allows overwriting objects. A remote attacker can exploit this vulnerability by enticing the user to ope...
Adobe Acrobat and Reader Type Confusion (APSB17-24: CVE-2017-11221)
A type confusion overflow vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to the way Adobe processes font locations. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11251)
A memory corruption vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to an error in Adobe Acrobat and Reader while parsing a corrupted file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11227)
A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to the record component of EMF files. A remote attacker might exploit this issue by convincing a victim to open a specially crafted PDF file...
Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11230)
A memory corruption vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to how Adobe processes JPEG format. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file with Adobe Reader...
Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11243)
A memory corruption vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...
Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11252)
A memory corruption vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to an error in Adobe Acrobat and Reader while parsing a corrupted file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Adobe Acrobat and Reader Heap Overflow (APSB17-24: CVE-2017-11220)
A heap overflow vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to the way Adobe processes memory bounds checks. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11265)
A memory corruption vulnerability exists in Adobe Acrobat and Reader. A remote attacker may exploit this issue by enticing a target user to open a malicious PDF file with an affected version of Adobe Reader or Acrobat...
Adobe Acrobat and Reader Use After Free (APSB17-24: CVE-2017-11219)
A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...
Adobe Acrobat and Reader Use After Free (APSB17-24: CVE-2017-11231)
A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...
Adobe Acrobat and Reader Security Bypass (APSB17-24: CVE-2017-11229)
A code injection vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to the FDF component of Adobe Reader and Acrobat. A remote attacker might exploit this issue by convincing a victim to open a specially crafted PDF file...
Adobe Acrobat and Reader Use After Free (APSB17-24: CVE-2017-11256)
A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to how Adobe processes XFA layout. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file with Adobe Reader...
Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11263)
A memory corruption vulnerability exists in Adobe Acrobat and Reader. A remote attacker may exploit this issue by enticing a target user to open a malicious PDF file with an affected version of Adobe Reader or Acrobat...
Adobe Acrobat and Reader Use After Free (APSB17-24: CVE-2017-3120)
A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...
Adobe Acrobat and Reader Use After Free (APSB17-24: CVE-2017-3113)
A Use After Free vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Adobe Acrobat and Reader Use After Free (APSB17-24: CVE-2017-11218)
A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...
Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11222)
A memory corruption vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to the way Adobe processes embedded RPC data. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
CVE-2017-5108
Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file...