CVE-2018-14295

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF Phantom PDF 9.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2018-14313

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-14313: Access of Resource Using Incompatible Type

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-0202

clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format .pdf...

Nitro Pro 10 PDF Handling Code Execution Vulnerability(CVE-2016-8713)

Summary A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.9.9. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this...

CVE-2017-14617

In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files...

Nitro Pro 11 PDF Handling Code Execution Vulnerability(CVE-2016-2796)

Summary An out of bound write vulnerability exists in the PDF parsing functionality of Nitro Pro 11.0.4.159. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability. Tested...

Nitro Pro 11 PDF Handling Code Execution Vulnerability

Summary An out of bound write vulnerability exists in the PDF parsing functionality of Nitro Pro 11.0.4.159. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability. Tested...

DEBIAN-CVE-2016-10220

The gsmakewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file that is mishandled in the PDF Transparency module...

Nitro Pro 10 PDF Handling Code Execution Vulnerability

Summary A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.9.9. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this...

Foxit Reader < 8.1 Multiple Vulnerabilities

Binary data 8962.prm...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2016-07683)

Microsoft Edge is the default browser that comes with the Windows 10 operating system. Microsoft Edge handles PDF inventory in an information disclosure vulnerability, which can be exploited by a remote attacker to build a malicious WEB page that induces the user to parse and can access sensitive...

Foxit Reader < 8.0 Multiple Vulnerabilities

Binary data 9469.prm...

Google Chrome opj_pi_update_decode_poc function denial of service vulnerability

Google Chrome is a web browsing tool developed by Google. Google Chrome 48.0.2564.109 previous version of the existence of a denial of service vulnerability, due to PDFium within OpenJPEG in the function opjpiupdatedecodepoc wrongly calculated a certain layer index value. A remote attacker could...

Adobe Acrobat and Reader Use After Free Code Execution (APSB16-02: CVE-2016-0940)

A remote code execution vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to a use-after-free error in Adobe Reader and Acrobat while handling a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a...

Foxit Reader Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of PDF...

Adobe Reader DC Uninitialized Memory Remote Code Execution Vulnerability

Adobe Reader is PDF document reading software. Adobe Reader has a security vulnerability in the handling of PDF files. The constructed PDF can cause uninitialized memory to be indirectly referenced. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current...

PT-2015-1505

Name of the Vulnerable Software and Affected Versions Adobe Reader affected versions not specified Adobe Reader DC affected versions not specified Adobe Acrobat affected versions not specified Adobe Acrobat DC affected versions not specified Description The issue is related to a use-after-free...

Memory Error Referencing Arbitrary Code Execution Vulnerability in Adobe Reader/Acrobat (CNVD-2015-03143)

Adobe Reader/Acrobat are popular applications for processing PDF files. A memory misreference vulnerability exists in Adobe Reader/Acrobat's handling of particular PDF files, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into parsing them,...

Apple MAC OS X Yosemite DF File Memory Corruption Vulnerability

Apple MAC OS X Yosemite is the latest operating system developed by Apple. A memory corruption vulnerability exists in Apple MAC OS X Yosemite's handling of PDF files, which allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could cause the application ...