2577 matches found
CVE-2021-30786
A race condition was addressed with improved state handling. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution...
CVE-2021-36017 Adobe After Effects PDF File Parsing Memory Corruption Remote Code Execution Vulnerability
Adobe After Effects version 18.2.1 and earlier is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...
CVE-2021-35993 Adobe After Effects PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Adobe After Effects version 18.2.1 and earlier is affected by an out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issu...
CVE-2021-36019 Adobe After Effects PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe After Effects version 18.2.1 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation of this...
CVE-2021-36009 Adobe Illustrator PDF File Parsing Memory Corruption Remote Code Execution Vulnerability
Adobe Illustrator version 25.2.3 and earlier is affected by an memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...
CVE-2021-35989 Adobe Bridge PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Adobe Bridge version 11.0.2 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...
CVE-2021-28591 Adobe Illustrator PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Adobe Illustrator version 25.2.3 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...
Apple macOS AppKit PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the AppKit library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...
Foxit Reader < 11.0.1 Multiple Vulnerabilities
According to its version, the Foxit Reader application installed on the remote Windows host is prior to 11.0.1. It is, therefore affected by multiple arbitrary code execution vulnerabilities due to a use-after-free flaw in the JavaScript engine. An authenticated, local attacker can exploit this b...
Ubuntu 18.04 LTS / 20.04 LTS : QPDF vulnerabilities (USN-5026-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5026-1 advisory. It was discovered that QPDF incorrectly handled certain malformed PDF files. A remote attacker could use this issue to cause QPDF to consume...
About the security content of iOS 14.7 and iPadOS 14.7
About the security content of iOS 14.7 and iPadOS 14.7 This document describes the security content of iOS 14.7 and iPadOS 14.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
CVE-2021-27038
A Type Confusion vulnerability in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can occur when processing a maliciously crafted PDF file. A malicious actor can leverage this to execute arbitrary code...
(0Day) Autodesk Design Review PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...
The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in the ability to write code beyond the buffer boundaries in memory, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using a specially crafted PDF file...
CVE-2021-28586 Adobe After Effects PDF file parsing out-of-bounds write could lead to remote code execution vulnerability
After Effects version 18.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Autodesk Design Review PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...
Autodesk Design Review PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...
Google Chrome suffers from an information disclosure vulnerability (CNVD-2021-47672)
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an information disclosure vulnerability. A remote attacker can exploit the vulnerability to obtain potentially sensitive information from process memory via specially crafted PDF files...
Infinite Loop in Apache PDFBox
In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions...
