Xpdf 3.02-13 - 'zxpdf' Security Bypass

source: https://www.securityfocus.com/bid/49007/info Xpdf is prone to a security-bypass vulnerability that may allow attackers to perform actions without proper authorization. Attackers can exploit this issue to bypass security restrictions and perform unauthorized actions; this may aid in...

Department of Homeland Security (DHS) Emails leaked by #Antisec Anonymous

Department of Homeland Security DHS Emails leaked by Antisec Anonymous One of the Anonymous - @AnonWorldUnite today leaked the DHS emails on internet. He tweeted "A Wild Leak Has Appeared! :https://wp.me/p1JyTn-f AntiSec AnonOps Leak LulzSec Anonymous https://wp.me/p1JyTn-f" The link given in the...

APPLE-SA-2011-07-20-1 Safari 5.1 and Safari 5.0.6

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-07-20-1 Safari 5.1 and Safari 5.0.6 Safari 5.1 and Safari 5.0.6 are now available and address the following: CFNetwork Available for: Windows 7, Vista, XP SP2 or later Impact: Visiting a maliciously crafted website may lead to a cross-...

Adobe Reader Installed (Mac OS X)

Adobe Reader, a PDF file viewer, is installed on the remote Mac OS X host. TRUSTED...

Foxit Reader < 4.0.0.0619 FreeType Engine RCE

The version of Foxit Reader installed on the remote Windows host is prior to 4.0.0.0619. It is, therefore, affected by a remote code execution vulnerability in the FreeType engine due to an integer overflow condition in the Type 1 font decoder. An attacker can exploit this, by tricking a user int...

SlimPDF Reader - Denial of Service (PoC)

SlimPDF Reader - Denial of Service PoC Slimpdf Reader from investintech, http://www.investintech.com/resources/freetools/slimpdfreader/ is prone to several overflows that can lead to code execution. The crash below is triggered by simply adding 50.000 random characters in the header of a pdf file...

Adobe Reader 9.x / 10.x Multiple Vulnerabilities (APSB11-08)

The remote Windows host contains a version of Adobe Reader 9.x 9.4.4 or 10.x = 10.1. Such versions are affected by multiple memory corruption vulnerabilities. A remote attacker could exploit this by tricking a user into viewing a maliciously crafted PDF file, resulting in arbitrary code execution...

Adobe Reader Encoded CCITT Decompression Heap Overflow (APSB11-03; CVE-2011-0567)

Adobe Reader and Acrobat is a family of computer programs developed by Adobe Systems, designed to view, create, manipulate and manage files in Adobe's core technology, the Portable Document Format PDF, a format that has become the de facto standard in the electronic document exchange. A memory...

CVE-2011-0332

Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks in a PDF file, which triggers a heap-based buffer overflow...

Adobe Reader ICC Embedded In PDF CLUT Array Buffer Overflow (APSB11-03; CVE-2011-0598)

Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. A remote code execution vulnerability has been discovered in Adobe Reader and Acrobat. The...

CVE-2011-0602

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via crafted JP2K record types in a JPEG2000 image in a PDF file, which causes heap corruption, a different vulnerability than CVE-2011-0596,...

Adobe Flash memory corruption vulnerability

Overview Adobe Flash contains an memory corruption vulnerability that can allow a remote, unauthenticated attacker to execute arbitrary code. Description Adobe Flash versions 10.1.102.64 and earlier contain a vulnerability that can result in memory corruption, which can allow arbitrary code...

GLSA-201101-08 : Adobe Reader: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201101-08 Adobe Reader: Multiple vulnerabilities Multiple vulnerabilities were discovered in Adobe Reader. For further information please consult the CVE entries and the Adobe Security Bulletins referenced below. Impact : A remote...

CVE-2010-2604

Multiple buffer overflows in the PDF Distiller in the BlackBerry Attachment Service component in Research In Motion RIM BlackBerry Enterprise Server 4.1.3 through 5.0.2, and Enterprise Server Express 5.0.1 and 5.0.2, allow remote attackers to execute arbitrary code via a crafted PDF file...

Buffer overflow

Multiple buffer overflows in the PDF Distiller in the BlackBerry Attachment Service component in Research In Motion RIM BlackBerry Enterprise Server 4.1.3 through 5.0.2, and Enterprise Server Express 5.0.1 and 5.0.2, allow remote attackers to execute arbitrary code via a crafted PDF file...

SuSE 11 Security Update : okular. (SAT Patch Number 3064)

This update fixes a heap-based overflow in okular. The RLE decompression in the TranscribePalmImageToJPEG function can be exploited to execute arbitrary code with user privileges by providing a crafted PDF file. CVE-2010-2575 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

Foxit Reader Crafted PDF Title Handling Stack Buffer Overflow

Added: 11/22/2010 OSVDB: 68648 Background Foxit Reader is a free PDF reader for Microsoft Windows systems. Problem Foxit Reader for Windows is vulnerable to a stack buffer overflow which could allow execution of arbitrary code. A remote attacker can exploit this vulnerability by enticing a user t...

Immunity Canvas: ADOBE_FLASH_BUTTON

Name| adobeflashbutton ---|--- CVE| CVE-2010-3654 Exploit Pack| CANVAS Description| adobeflashbutton Notes| CVE Name: CVE-2010-3654 VENDOR: Adobe NOTES: Exploitation through an PDF file is more reliable than with a direct HTML/Flash exploit VersionsAffected: Adobe Acrobat Reader 9.4.0...

openSUSE Security Update : gwenview (openSUSE-SU-2010:0691-1)

This update fixes a heap-based overflow in okular. The RLE decompression in the TranscribePalmImageToJPEG function can be exploited to execute arbitrary code with user privileges by providing a crafted PDF file. CVE-2010-2575. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Adobe Flash unspecified code execution vulnerability

Overview Adobe Flash contains an unspecified vulnerability that can allow a remote, unauthenticated attacker to execute arbitrary code. Description Adobe Flash contains a vulnerability that can result in memory corruption, which can allow arbitrary code execution. See also Adobe Security Advisory...