Security Bulletin: IBM Engineering Lifecycle Management - Jazz Foundation is impacted by vulnerabilities in Apache PDFBox

Summary Vulnerabilities have been identified in Apache PDFBox, which is used in IBM Engineering Lifecycle Management - Jazz Foundation. Vulnerability Details CVEID:CVE-2021-27807 DESCRIPTION: A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apac...

CVE-2013-10068

Foxit Reader versions through 5.4.5.0114, including the bundled Foxit Reader Plugin 2.2.1.530, contains a stack-based buffer overflow vulnerability in the npFoxitReaderPlugin.dll module. When a PDF file is loaded from a remote host, an overly long query string in the URL can overflow a buffer,...

libvips:thumbnail_fuzzer: Heap-buffer-overflow in vips_rect_intersectrect

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=4732694506897408 Project: libvips Fuzzing Engine: afl Fuzz Target: thumbnailfuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x602000015800...

xpdf:fuzz_pdfload: Segv on unknown address in Catalog::getPage

Detailed Report: https://oss-fuzz.com/testcase?key=5190877163683840 Project: xpdf Fuzzing Engine: libFuzzer Fuzz Target: fuzzpdfload Job Type: libfuzzerasanxpdf Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: Catalog::getPage PDFDoc::displayPage fuzzpdfload.cc...

GHSA-2H3J-M7GR-25XJ Excessive Iteration Denial of Service in Apache PDFBox

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions...

GHSA-7GRW-6PJH-JPC9 Infinite Loop in Apache PDFBox

In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions...

UBUNTU-CVE-2021-31812

In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions...

GHSA-6VQP-H455-42MR Uncontrolled Memory Allocation in Apache PDFBox

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions...

CVE-2017-1000424: Undefined Security Weakness

Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control...