2587 matches found
Adobe Acrobat/Reader 逻辑错误代码执行漏洞(CVE-2013-0611)
CVE ID:CVE-2013-0611 Adobe Reader/Acrobat是流行的处理PDF文件的应用程序。 Adobe Reader/Acrobat处理PDF文件存在一个逻辑漏洞，允许攻击者构建恶意文件，诱使用户解析，可以应用程序上下文执行任意代码。 0 Windows和Macintosh平台下的Adobe Reader XI 11.0.0 Windows和Macintosh平台下的Adobe Reader X 10.1.4及之前的10.x Windows和Macintosh平台下的Adobe Reader 9.5.2及之前的9.x Linux平台下的Adobe Reader...
SumatraPDF 2.1.1MuPDF 1.0 - Integer Overflow
SumatraPDF 2.1.1MuPDF 1.0 - Integer Overflow Sumatra 2.1.1/MuPDF 1.0 Integer Overflow ======================================= There is an integer overflow on the MuPDF in the lexnumber function which can be triggered using a corrupt PDF file with ObjStm. I'm attaching a file that reproduces the...
SumatraPDF 2.1.1/MuPDF 1.0 - Integer Overflow
Sumatra 2.1.1/MuPDF 1.0 Integer Overflow ======================================= There is an integer overflow on the MuPDF in the lexnumber function which can be triggered using a corrupt PDF file with ObjStm. I'm attaching a file that reproduces the problem with the original unmodified file. The...
SumatraPDF Detection
SumatraPDF, a free PDF file viewer, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62389; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"SumatraPDF Detection";...
Fedora Core 4 : kdegraphics-3.5.0-0.2.fc4 (2005-037)
Several flaws were discovered in Xpdf. An attacker could construct a carefully crafted PDF file that could cause xpdf to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-3193 to these issues. Users of kdegraphics...
CVE-2012-4405
Multiple integer underflows in the icmLutallocate function in International Color Consortium ICC Format library icclib, as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted 1...
Design/Logic Flaw
Untrusted search path vulnerability in Sorax Reader 2.0.3129.70 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these details are obtained from third party informatio...
Adobe Reader PDF File Invalid Value Code Execution (APSB12-16; CVE-2012-4151)
A remote code execution vulnerability has been reported in Adobe Acrobat and Reader...
Scientific Linux Security Update : cups on SL4.x, SL5.x i386/x86_64
Multiple integer overflow flaws were found in the CUPS JBIG2 decoder. An attacker could create a malicious PDF file that would cause CUPS to crash or, potentially, execute arbitrary code as the 'lp' user if the file was printed. CVE-2009-0147, CVE-2009-1179 Multiple buffer overflow flaws were fou...
Scientific Linux Security Update : poppler on SL6.x i386/x86_64
Two uninitialized pointer use flaws were discovered in poppler. An attacker could create a malicious PDF file that, when opened, would cause applications that use poppler such as Evince to crash or, potentially, execute arbitrary code. CVE-2010-3702, CVE-2010-3703 An array index error was found i...
Scientific Linux Security Update : poppler on SL5.x i386/x86_64
An uninitialized pointer use flaw was discovered in poppler. An attacker could create a malicious PDF file that, when opened, would cause applications that use poppler such as Evince to crash or, potentially, execute arbitrary code. CVE-2010-3702 An array index error was found in the way poppler...
GLSA-201206-14 : Adobe Reader: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201206-14 Adobe Reader: Multiple vulnerabilities Multiple vulnerabilities have been found in Adobe Reader, including an integer overflow in TrueType Font handling CVE-2012-0774 and multiple unspecified errors which could cause...
Adobe Reader and Acrobat TTF MINDEX Code Execution (APSB12-08; CVE-2012-0774)
A remote code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Adobe Acrobat and Reader JPEG DCT Dequantizer Memory Corruption (APSB12-01; CVE-2011-4370)
A memory corruption vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to a buffer overflow while loading specially crafted JPEG image resources from a PDF file. A remote attacker may exploit this issue by enticing a target user to open a malicious PDF file with...
Adobe Reader < 9.4.7 Multiple Memory Corruption Vulnerabilities (APSB11-30)
The remote Windows host contains a version of Adobe Reader earlier than 9.4.7. Such versions are affected by multiple memory corruption vulnerabilities related to the 'Universal 3D' U3D file format and the 'Product Representation Compact' PRC component. A remote attacker could exploit this by...
Adobe Acrobat < 9.4.7 Multiple Memory Corruption Vulnerabilities (APSB11-30)
The remote Windows host contains a version of Adobe Acrobat earlier than 9.4.7. Such versions are affected by multiple memory corruption vulnerabilities related to the 'Universal 3D' U3D file format and the 'Product Representation Compact' PRC component. A remote attacker could exploit this by...
Mandriva Update for poppler MDVSA-2011:175 (poppler)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mandriva Update for poppler MDVSA-2011:175 (poppler)
Check for the Version of poppler OpenVAS Vulnerability Test Mandriva Update for poppler MDVSA-2011:175 poppler Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Google Chrome < 14.0.835.163 PDF File Handling Memory Corruption
No description provided by source. ----------------Security Adisory---------------- Title: Google Chrome 14.0.835.163 PDF File Handling Memory Corruption Vulnerability CVE-2011-2841 Sec-Security: Hich CVE-Number: CVE-2011-2841 Date of discovery: 04/06/2011MM/DD/YYYY Fix date: 06/28/2011MM/DD/YYYY...
Adobe Reader JPEG Marker Code Execution (APSB11-24; CVE-2011-2440)
A code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an error while parsing corrupted PDF files. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file. Successful exploitation would allo...