Lucene search
+L

1222 matches found

CNVD
CNVD
added 2022/01/25 12:00 a.m.49 views

Adobe Acrobat Reader Dc Buffer Overflow Vulnerability (CNVD-2022-11156)

Adobe Acrobat Reader Dc is a Pdf reading tool from Adobe. Adobe Acrobat Reader Dc suffers from a buffer error vulnerability that originates from a boundary error when handling untrusted input. An attacker could exploit this vulnerability to create a specially crafted PDF file, trick the victim in...

7.8CVSS7.6AI score0.12264EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/01/25 12:00 a.m.50 views

Adobe Acrobat Reader Dc Resource Management Error Vulnerability (CNVD-2022-11153)

Adobe Acrobat Reader Dc is a Pdf reading tool from the American company Adobe. It is used to reliably view, print and annotate Pdf documents. Adobe Acrobat Reader Dc suffers from a resource management error vulnerability, which stems from a post-release usage error when processing PDF files. A...

5.5CVSS3.3AI score0.06223EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/01/16 12:00 a.m.54 views

Acrobat Reader DC buffer overflow vulnerability

Adobe Acrobat is a set of PDF file editing and conversion tools from Adobe, a U.S. company. A security vulnerability exists in Adobe Acrobat and Reader, which stems from a boundary error when processing PDF files. A remote, unauthenticated attacker could use the vulnerability to trick victims int...

9.3CVSS4.3AI score0.57304EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/13 10:15 p.m.25 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

4.3CVSS3.4AI score0.01603EPSS
SaveExploits0References2Affected Software2
CNVD
CNVD
added 2021/12/19 12:00 a.m.66 views

iText command injection vulnerability

iText is an open source library for creating and manipulating PDF files in Java. It is written by Bruno Lowagie, Paulo Soares and others. iText in the version before 7.1.17 there is a command injection vulnerability, the vulnerability stems from the user input construct to execute the command...

9.8CVSS4.4AI score0.05172EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/14 12:15 p.m.37 views

CVE-2021-44001

A vulnerability has been identified in JT2Go All versions V13.2.0.5, Teamcenter Visualization All versions V13.2.0.5. The DL180pdfl.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in...

7.8CVSS0.02031EPSS
SaveExploits0References2
Prion
Prion
added 2021/12/14 12:15 p.m.22 views

Design/Logic Flaw

A vulnerability has been identified in JT2Go All versions V13.2.0.5, Teamcenter Visualization All versions V13.2.0.5. The DL180pdfl.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in...

6.8CVSS7.7AI score0.02031EPSS
SaveExploits0References2Affected Software2
CNVD
CNVD
added 2021/12/12 12:00 a.m.44 views

Bentley View PDF File Out-of-Bounds Writing Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. An out-of-bounds write vulnerability exists in Bentley View, which stems from a specific flaw present in the parsing of PDF files. Data created in a PDF file can trigger a write operation beyond the end of the allocated buffer. An attacker...

7.8CVSS2.9AI score0.01996EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/12/12 12:00 a.m.44 views

Bentley View DWG file parsing out-of-bounds read information disclosure vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. An out-of-bounds read information disclosure vulnerability exists in Bentley View DWG file parsing, which stems from the lack of proper validation of user-supplied data in the parsing of PDF files resulting in reading beyond the end of the...

4.3CVSS2.5AI score0.0161EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:00 a.m.18 views

OpenText Brava! Desktop pdf2dl Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.7AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/11/06 12:00 a.m.14 views

PT-2021-7207 · Autodesk +1 · Autodesk Navisworks 2022 +2

Name of the Vulnerable Software and Affected Versions: PDFTron versions prior to 9.0.7 Autodesk Navisworks 2022 Autodesk Navisworks 2020 Description: A Memory Corruption issue may lead to code execution through maliciously crafted DLL files or specially crafted PDF files, allowing an attacker to...

7.8CVSS7.8AI score0.00483EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/10/28 12:00 a.m.31 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : ImageMagick Vulnerability (NS-SA-2021-0100)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has ImageMagick packages installed that are affected by a vulnerability: - ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF...

7.8CVSS7.3AI score0.07508EPSS
SaveExploits1References3
CNVD
CNVD
added 2021/10/19 12:00 a.m.56 views

Foxit PDF Reader and Foxit PDF Editor Buffer Overflow Vulnerability

Foxit PDF Reader is China Foxit Foxit company a PDF reader. A buffer overflow vulnerability exists in Foxit PDF Reader and Foxit PDF Editor, which results from a boundary error when processing PDF files. An attacker can exploit this vulnerability to create a carefully constructed PDF file, trick...

7.8CVSS8AI score0.01962EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/10/19 12:00 a.m.36 views

Foxit PDF Reader Information Disclosure Vulnerability (CNVD-2021-100579)

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader is vulnerable to an information disclosure vulnerability that originates when the product does not verify the existence of an object when parsing PDF files. An attacker can exploit this and other vulnerabilities to execute...

5.5CVSS3.9AI score0.0034EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:00 a.m.25 views

Foxit PDF Reader JPG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PD...

7.8CVSS5.8AI score0.00385EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/13 12:00 a.m.35 views

Adobe Illustrator PDF File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.7AI score0.02512EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/09/29 3:36 p.m.6 views

CVE-2021-39831 Adobe FrameMaker PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Framemaker versions 2019 Update 8 and earlier and 2020 Release Update 2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mu...

7.8CVSS7.7AI score0.02169EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/09/22 12:00 a.m.15 views

PDFTools stack buffer overflow vulnerability

PDFTools is a tool for converting PDF files to ePUB format. A stack buffer overflow vulnerability exists in the Analyze::AnalyzePages function in analyze.cpp in PDFTools 20200714 and earlier versions. An attacker could exploit this vulnerability to execute code...

7.8CVSS5.5AI score0.01052EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/09/16 12:00 a.m.63 views

Autodesk Navisworks Out-of-Bounds Read Vulnerability (CNVD-2021-99309)

Autodesk Navisworks, a 3D model review software for architecture, engineering and construction, is vulnerable to an out-of-bounds read vulnerability in Autodesk Navisworks versions 2019, 2020, 2021, 2022. An attacker can exploit the vulnerability to execute arbitrary code via specially crafted PD...

7.8CVSS7AI score0.00957EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/09/16 12:00 a.m.38 views

Adobe FrameMaker PDF File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe FrameMaker. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

3.3CVSS2.9AI score0.0154EPSS
SaveExploits0References1
Rows per page
Query Builder