Adobe Acrobat Reader DC for Windows - Double Free due to Malformed JP2 Stream

Adobe Acrobat Reader DC for Windows - Double Free due to Malformed JP2 Stream We have observed the following crash in the latest version of Adobe Acrobat Reader DC for Windows, when opening a malformed PDF file: --- cut --- ======================================= VERIFIER STOP 00000007: pid 0x2C1...

Adobe Acrobat Reader DC for Windows - Double Free due to Malformed JP2 Stream

We have observed the following crash in the latest version of Adobe Acrobat Reader DC for Windows, when opening a malformed PDF file: --- cut --- ======================================= VERIFIER STOP 00000007: pid 0x2C1C: Heap block already freed. 0C441000 : Heap handle for the heap owning the...

Adobe Acrobat Reader DC for Windows - Heap-Based Buffer Overflow in CoolType.dll

We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Windows, when opening a malformed PDF file: --- cut --- 3fb8.2ac4: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This...

Adobe Acrobat/Reader Type Obfuscation Vulnerability (CNVD-2019-30090)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. A type confusion vulnerability exists in Adobe Acrobat/Reader. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat Reader DC for Windows - Heap-Based Memory Corruption due to Malformed TTF Font

Adobe Acrobat Reader DC for Windows - Heap-Based Memory Corruption due to Malformed TTF Font We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Windows, when opening a malformed PDF file: --- cut --- 4c84.1e3c: Access violation - code...

Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB19-41: CVE-2019-8045)

An untrusted pointer dereference vulnerability exists in Adobe Acrobat and Reader. A remote unauthenticated attacker could exploit this vulnerability by enticing a target to view a specially crafted pdf file. Successful exploitation of this vulnerability could allow a remote attacker to damage...

NewStart CGSL MAIN 4.05 : poppler Vulnerability (NS-SA-2019-0118)

The remote NewStart CGSL host, running version MAIN 4.05, has poppler packages installed that are affected by a vulnerability: - An integer overflow leading to heap-based buffer overflow was found in the poppler library. An attacker could create a malicious PDF file that would cause applications...

CVE-2019-14934

An issue was discovered in PDFResurrect before 0.18. pdfloadpageskids in pdf.c doesn't validate a certain size value, which leads to a malloc failure and out-of-bounds write...

Denial Of Service (Dos)

poppler is vulnerable to denial of service. A remote attacker is able to crash the application by crafting a PDF file with a malicious xref data structure that causes the application during extractPDFSubtype processing...

CVE-2019-5854

Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2019-5860

Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2019-14267

PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled...

CVE-2019-14267

PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled...

CVE-2019-14267

PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled...

Buffer overflow

PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled...

CVE-2019-14267

PDFResurrect 0.15 has a buffer overflow via a crafted PDF file caused by mishandling of startxref and %%%EOF. NVD CVE-2019-14267 (and related CVEs) are documented with mitigations/patches in multiple advisories (e.g., Fedora fixes around 0.18, Ubuntu USN-5282-1). Exploitation status is not detail...

CVE-2019-14267

PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled...

pdfresurrect 0.15 - Buffer Overflow

pdfresurrect 0.15 - Buffer Overflow Exploit Title: pdfresurrect 0.15 Buffer Overflow Date: 2019-07-26 Exploit Author: j0lama Vendor Homepage: https://github.com/enferex/pdfresurrect Software Link: https://github.com/enferex/pdfresurrect Version: 0.15 Tested on: Ubuntu 18.04 CVE : CVE-2019-14267...

The vulnerability of the fz AppendDisplayNode function in the Artifex MuPDF PDF viewer software arises from a buffer overflow in the dynamic memory; this allows an attacker to execute arbitrary code.

The vulnerability of the fz AppendDisplayNode function in the Artifex MuPDF PDF viewer program is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code using a specially created PDF file...

CVE-2019-1010006

Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiffdocumentrend...