2577 matches found
CVE-2021-31812
In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions...
CVE-2021-31812 A carefully crafted PDF file can trigger an infinite loop while loading the file
In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions...
CVE-2021-31812
Apache PDFBox vulnerability CVE-2021-31812: a specially crafted PDF can trigger an infinite loop while loading, affecting version 2.0.23 and all prior 2.0.x. Impact is listed as High for availability (DoS via resource exhaustion). The provided documents confirm the affected product/component and ...
CVE-2021-31811
In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions...
CVE-2021-31811 A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny file
In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions...
Opentext OpenText Brava! Information Disclosure Vulnerability
Opentext OpenText Brava! is a browser-based universal document viewer from Opentext Canada. The product supports viewing, annotating, and editing many types of documents.Desk is a writing, blogging, and note-taking application for individual developers. A security vulnerability exists in OpenText...
CVE-2021-34280
Polaris Office v9.103.83.44230 is affected by a Uninitialized Pointer Vulnerability in PolarisOffice.exe and EngineDLL.dll that may cause a Remote Code Execution. To exploit the vulnerability, someone must open a crafted PDF file...
Privilege escalation
Polaris Office v9.103.83.44230 is affected by a Uninitialized Pointer Vulnerability in PolarisOffice.exe and EngineDLL.dll that may cause a Remote Code Execution. To exploit the vulnerability, someone must open a crafted PDF file...
OpenText Brava! Desktop Remote Code Execution Vulnerability
OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. A remote code execution vulnerability exists in the parsing of PDF files in OpenText Brava! Desktop. The vulnerability stems from a failure to properly initializ...
PoDoFo Post-Release Reuse Vulnerability
PoDoFo is a free, portable and easy to use PDF parsing, modification and creation library. A post-release reuse vulnerability exists in the PoDoFo::PdfVecObjects::Clear function in PoDoFo version 0.9.7. An attacker can exploit this vulnerability to cause a denial of service via a specially crafte...
CVE-2021-30469
A flaw was found in PoDoFo 0.9.7. An use-after-free in PoDoFo::PdfVecObjects::Clear function can cause a denial of service via a crafted PDF file...
Design/Logic Flaw
A flaw was found in PoDoFo 0.9.7. An use-after-free in PoDoFo::PdfVecObjects::Clear function can cause a denial of service via a crafted PDF file...
CVE-2021-30469
CVE-2021-30469 affects PoDoFo 0.9.7. The issue is a use-after-free in PoDoFo::PdfVecObjects::Clear(), which can lead to a denial of service when processing a crafted PDF file. The connected documents corroborate the same description; no explicit exploit details or patches are provided in the sour...
Oracle Linux 8 : ghostscript (ELSA-2021-1852)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1852 advisory. 9.27-1 - Rebase to 9.27 - Resolves: rhbz1874523 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
Adobe After Effects PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...
CVE-2021-31464
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31470
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2021-31449
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...