CVE-2023-33733

Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file...

CVE-2023-33733

Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file...

CVE-2023-2933

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

Design/Logic Flaw

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

CVE-2023-2931

CVE-2023-2931 : A use-after-free in the PDF handling code of Google Chrome/Chromium allows a remote attacker to potentially cause heap corruption and execute arbitrary code via a crafted PDF file. Affected components include the PDF component of Chrome/Chromium before version 114.0.5735.90. The C...

CVE-2023-2933

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

CVE-2023-2931

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

Denial Of Services (DoS)

libpodofo.so is vulnerable to Denial Of Services DoS. The vulnerability exists due to the segmentation fault in the CreateFromObject function of PdfEncrypt.cpp, which allows an attacker to cause an application crash through the SIGSEGV error by providing a maliciously crafted pdf file...

CVE-2023-2662 Divide-by-zero in Xpdf 4.04 due to bad color space object

In Xpdf 4.04 and earlier, a bad color space object in the input PDF file can cause a divide-by-zero...

CVE-2023-2662

In Xpdf 4.04 and earlier, a bad color space object in the input PDF file can cause a divide-by-zero...

CVE-2023-26934

An issue found in XPDF v.4.04 allows an attacker to cause a denial of service via a crafted pdf file in the object.cc parameter. Notes Author| Note ---|--- ebarretto | xpdf in Debian uses poppler, which is not affected or fixed...

New QBot Banking Trojan Campaign Hijacks Business Emails to Spread Malware

A new QBot malware campaign is leveraging hijacked business correspondence to trick unsuspecting victims into installing the malware, new findings from Kaspersky reveal. The latest activity, which commenced on April 4, 2023, has primarily targeted users in Germany, Argentina, Italy, Algeria, Spai...

The vulnerability of PDF editing programs like Foxit PhantomPDF, Foxit PDF Editor, and PDF document viewing programs like Foxit PDF Reader lies in their memory management after memory is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF editing programs such as Foxit PhantomPDF, Foxit PDF Editor, and programs for viewing electronic documents in PDF format, like Foxit PDF Reader, is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary cod...

Amazon Linux AMI : ghostscript (ALAS-2023-1725)

The version of ghostscript installed on the remote host is prior to 8.70-24.27. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1725 advisory. A heap-based buffer over write vulnerability was found in GhostScript's lp8000printpage function in gdevlp8k.c file. An...

Design/Logic Flaw

An issue found in Wondershare Technology Co.,Ltd PDF Reader v.1.0.1 allows a remote attacker to execute arbitrary commands via the pdfreadersetupfull13143.exe file...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...

CVE-2022-37369

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-37388

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...