Nitro Pro 10 PDF Handling Code Execution Vulnerability

Summary A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.9.9. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this...

Foxit Reader < 8.1 Multiple Vulnerabilities

Binary data 8962.prm...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2016-07683)

Microsoft Edge is the default browser that comes with the Windows 10 operating system. Microsoft Edge handles PDF inventory in an information disclosure vulnerability, which can be exploited by a remote attacker to build a malicious WEB page that induces the user to parse and can access sensitive...

Foxit Reader < 8.0 Multiple Vulnerabilities

Binary data 9469.prm...

Google Chrome opj_pi_update_decode_poc function denial of service vulnerability

Google Chrome is a web browsing tool developed by Google. Google Chrome 48.0.2564.109 previous version of the existence of a denial of service vulnerability, due to PDFium within OpenJPEG in the function opjpiupdatedecodepoc wrongly calculated a certain layer index value. A remote attacker could...

Adobe Acrobat and Reader Use After Free Code Execution (APSB16-02: CVE-2016-0940)

A remote code execution vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to a use-after-free error in Adobe Reader and Acrobat while handling a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a...

Foxit Reader Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of PDF...

Adobe Reader DC Uninitialized Memory Remote Code Execution Vulnerability

Adobe Reader is PDF document reading software. Adobe Reader has a security vulnerability in the handling of PDF files. The constructed PDF can cause uninitialized memory to be indirectly referenced. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current...

Memory Error Referencing Arbitrary Code Execution Vulnerability in Adobe Reader/Acrobat (CNVD-2015-03143)

Adobe Reader/Acrobat are popular applications for processing PDF files. A memory misreference vulnerability exists in Adobe Reader/Acrobat's handling of particular PDF files, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into parsing them,...

Apple MAC OS X Yosemite DF File Memory Corruption Vulnerability

Apple MAC OS X Yosemite is the latest operating system developed by Apple. A memory corruption vulnerability exists in Apple MAC OS X Yosemite's handling of PDF files, which allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could cause the application ...

Adobe Reader 10.1.4 Crash PoC

No description provided by source. !/usr/bin/perl Title : Adobe reader 10.1.4 memory corruption Version : 10.1.4.38 Date : 2012-10-21 Vendor : http://www.adobe.com/ Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Author : coolkaveh Bug : ---- Memory...

Oracle Linux 3 / 4 : xpdf (ELSA-2007-0735)

From Red Hat Security Advisory 2007:0735 : Updated xpdf packages that fix a security issue in PDF handling are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window...

Oracle Linux 5 : Important: / cups (ELSA-2007-0720)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0720 advisory. 1.1.22-0.rc1.9.20.2 - Better patch for CVE-2007-3387 bug 248220. 1.1.22-0.rc1.9.20.1 - Applied patch to fix CVE-2007-3387 bug 248220. Tenable has extracted the...

Oracle Linux 5 : Important: / tetex (ELSA-2007-0731)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0731 advisory. 2.0.2-22.0.1.EL4.8 - backport upstream fix for xpdf integer overflow CVE-2007-3387 248207 Resolves: 248207 Tenable has extracted the preceding description block...

Oracle Linux 4 : tetex (ELSA-2007-1027)

From Red Hat Security Advisory 2007:1027 : Updated tetex packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX...

Oracle Linux 4 : kdegraphics (ELSA-2007-0729)

From Red Hat Security Advisory 2007:0729 : Updated kdegraphics packages that fix a security issue in PDF handling are now available for Red Hat Enterprise Linux 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages...

Oracle Linux 4 : gpdf (ELSA-2007-0730)

From Red Hat Security Advisory 2007:0730 : Updated kdegraphics packages that fix a security issue in PDF handling are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. gpdf is a GNOME based viewer fo...

Avira AntiVir Engine PDF Handling Remote DoS

Binary data 6899.prm...

Google Chrome < 25.0.1364.97 Multiple Vulnerabilities

Binary data 800930.prm...

Adobe Reader 11.0.0 Stack Overflow Vulnerability

Stack Exhaustion vulnerability during the handling of the pdf files. That will trigger a denial of service condition Title : Adobe Reader 11.0.0 Stack overflow Version : 11.0.0.379 Date : 2012-11-01 Vendor : http://www.adobe.com/ Impact : Med Contact : coolkaveh at rocketmail.com Twitter :...