Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. A buffer overflow in pprintimage in devices/gdevcdj.c allows a remote attacker to cause a denial of service via a malicious PDF file...

Buffer Overflows

GhostScript is vulnerable to buffer overflows. A remote attacker could cause a buffer overflow in jetp3852printpage in devices/gdev3852.c via a crafted PDF file resulting in memory corruption...

Denial Of Service (DoS)

Artifex Software GhostScript is vulnerable to denial of service attacks. A remote attacker could cause buffer overflows in tiff12printpage in devices/gdevtfnx.c via a crafted PDF file resulting in denial of service conditions...

Denial Of Service (DoS)

Artifex Software GhostScript is vulnerable to denial of service attacks. A remote attacker could cause buffer overflows in mjcolorcorrect in contrib/japanese/gdevmjc.c via a crafted PDF file resulting in denial of service conditions...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. A Division by Zero vulnerability in bj10vprintpage in contrib/japanese/gdev10v.c allows a remote attacker to cause a denial of service via a malicious PDF file...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. A buffer overflow in GetNumWrongData in contrib/lips4/gdevlips.c allows a remote attacker to cause a denial of service via a malicious PDF file...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. A buffer overflow in FloydSteinbergDitheringC in contrib/gdevbjca.c allows a remote attacker to crash the application via a malicious PDF file...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service DoS. The vulnerability exists due to the heap-buffer-overflow in the lprnisblack function in contrib/lips4/gdevlprn.c, allowing an attacker to crash the application via a crafted PDF file...

Buffer Overflow

GhostScript is vulnerable to buffer overflow. This vulnerability exists due to a buffer overflow in pjcommonprintpage in devices/gdevpjet.c which allows an attacker to cause a denial of service via a maliciously crafted PDF file...

CVE-2020-16289

Artifex Software GhostScript is vulnerable to denial of service attacks. A remote attacker could cause buffer overflows in cifprintpage in devices/gdevcif.c via a crafted PDF file resulting in denial of service conditions...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. Incorrect object lifecycle handling allows a remote attacker to potentially exploit heap corruption via a malicious PDF file...

Arbitrary Code Execution

chromium is vulnerable to arbtirary code execution. Inappropriate memory management during caching allows a remote attacker to execute arbitrary code inside a sandbox via a malicious PDF file...

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

USN-4646-2: poppler regression

USN-4646-1 fixed vulnerabilities in poppler. The fix for CVE-2019-10871 introduced a regression causing certain applications linked against poppler to fail. This update backs out the fix pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovere...

Ubuntu 16.04 LTS / 18.04 LTS : poppler vulnerabilities (USN-4646-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4646-1 advisory. It was discovered that Poppler incorrectly handled certain files. If a user or automated system were tricked into opening a crafted PDF file,...

CVE-2020-16029

Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file...

Google Chrome PDFium Improperly Implemented Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A PDFium improperly implemented vulnerability exists in versions of Google Chrome prior to 87.0.4280.66. An attacker can exploit this vulnerability to bypass...

CVE-2020-24435

Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by a heap-based buffer overflow vulnerability in the submitForm function, potentially resulting in arbitrary code execution in the context of the current user. Exploitatio...

Heap overflow

Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by a heap-based buffer overflow vulnerability in the submitForm function, potentially resulting in arbitrary code execution in the context of the current user. Exploitatio...