CVE-2016-8709

A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability...

CVE-2016-8713

CVE-2016-8713 corresponds to a memory-corruption vulnerability in Nitro Pro 10.5.9.9. Public analyses describe a remote or local memory corruption due to an out-of-bounds write in Nitro Pro’s PDF parsing path. The vulnerability centers on code in the npdf.dll module handling PDF content (e.g., op...

PT-2017-9752 · Nitro · Nitro Pro

Name of the Vulnerable Software and Affected Versions: Nitro Pro version 10 Description: A remote out of bound write / memory corruption issue exists in the PDF parsing functionality. A specially crafted PDF file can cause potential memory corruption. An attacker can send the victim a specific PD...

Nitro Pro 10 PDF Handling Code Execution Vulnerability

Summary A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential code execution. An attacker can send the victim a specific PDF file to trigger this vulnerability. Tested...

pdfbox: XML External Entity vulnerability

It was found that the parsing of XMP and other XML formats in PDF by Apache PDFBox would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks...

Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

Oracle OIT IX SDK libvs_pdf Size Integer Overflow Vulnerability

Talos Vulnerability Report TALOS-2016-0097 Oracle OIT IX SDK libvspdf Size Integer Overflow Vulnerability July 19, 2016 CVE Number CVE-2016-3575 DESCRIPTION An integer overflow leading to two distinct issues can be triggered by a specially crafted PDF file. TESTED VERSIONS Oracle Outside In IX sd...

Oracle OIT IX SDK libvs_pdf Root xref Denial of Service Vulnerabiity

Talos Vulnerability Report TALOS-2016-0099 Oracle OIT IX SDK libvspdf Root xref Denial of Service Vulnerabiity July 19, 2016 CVE Number CVE-2016-3577 DESCRIPTION A stack overflow leading to a crash due to unbounded recusive function call is present in the PDF file format parsing code of the IX SD...

CVE-2016-4434

It was found that the parsing of OOXML, XMP in PDF, and some other file formats by Apache Tika would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XX...

Foxit Reader PDF Parsing Memory Corruption Vulnerability

Foxit Reader is a multifunctional PDF tool. It can create, read, edit and print PDF files. A memory corruption vulnerability exists in Foxit Reader PDF parsing, which can be exploited by remote attackers to execute arbitrary code...

Apple OS X PDF Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of PDF...

KLA10769 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or gain privileges. Below is a complete list of vulnerabilities 1. An improper input validation can be exploited by logged in...

Foxit Reader 7.2.8.1124 - PDF Parsing Memory Corruption

Exploit for windows platform in category dos / poc Application: Foxit Reader PDF Parsing Memory Corruption Platforms: Windows Versions: 7.2.8.1124 and earlier Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technica...

Foxit Reader 7.2.8.1124 - '.PDF' Parsing Memory Corruption

Application: Foxit Reader PDF Parsing Memory Corruption Platforms: Windows Versions: 7.2.8.1124 and earlier Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction...

Acrobat Reader DC 15.008.20082.15957 - '.PDF' Parsing Memory Corruption

Application: Acrobat Reader DC Platforms: Windows Versions: 15.008.20082.15957 CVE: CVE-2015-7622 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== Adobe Acrobat is a family of application...

Apple Safari TTF Out-Of-Bounds Access Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of font...

Adobe Acrobat/Reader Javascript API Execution Bypass Vulnerability (CNVD-2015-06720)

Adobe Reader/Acrobat is a popular application for working with PDF files. An unspecified security bypass vulnerability exists in Adobe Reader/Acrobat. The vulnerability allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could bypass Javascript API...

Unspecified Memory Corruption Arbitrary Code Execution Vulnerability in Adobe Reader/Acrobat (CNVD-2015-03140)

Adobe Reader/Acrobat are popular applications for processing PDF files. A memory corruption vulnerability exists in Adobe Reader/Acrobat's handling of particular PDF files, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into parsing them,...

CVE-2014-8816

CoreGraphics in Apple OS X before 10.10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PDF document...

Adobe Acrobat and Reader Time of Check Time of Use Race Condition (APSB14-28: CVE-2014-9150)

A time-of-check time-of-use race condition vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a special...