Input validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

[SECURITY] Fedora 27 Update: qpdf-7.1.1-5.fc27

QPDF is a command-line program that does structural, content-preserving transformations on PDF files. It could have been called something like pdf-to-pdf. It includes support for merging and splitting PDFs and to manipulate the list of pages in a PDF file. It is not a PDF viewer or a program...

[SECURITY] Fedora 26 Update: qpdf-7.1.1-5.fc26

QPDF is a command-line program that does structural, content-preserving transformations on PDF files. It could have been called something like pdf-to-pdf. It includes support for merging and splitting PDFs and to manipulate the list of pages in a PDF file. It is not a PDF viewer or a program...

[SECURITY] Fedora 26 Update: qpdf-6.0.0-6.fc26

QPDF is a command-line program that does structural, content-preserving transformations on PDF files. It could have been called something like pdf-to-pdf. It includes support for merging and splitting PDFs and to manipulate the list of pages in a PDF file. It is not a PDF viewer or a program...

Debian DLA-929-1 : libpodofo security update

Several heap-based buffer overflows, integer overflows and NULL pointer dereferences have been discovered in libpodofo, a library for manipulating PDF files, that allow remote attackers to cause a denial of service application crash or other unspecified impact via a crafted PDF document. For Debi...

Attacks on SWIFT Banking System Benefit From Insider Knowledge

ARCHIVED STORY Attacks on SWIFT Banking System Benefit From Insider Knowledge By Trellix · May 20, 2016 In recent months, we’ve seen headlines about the compromise of a bank in Bangladesh from which cybercriminals attempted to steal US$951 million. The malware they used was able to manipulate and...

Origami 1.0 released - Pdf manipulation framework !

Origami is a framework for PDF documents manipulation written in pure Ruby. It can be used to analyze or create malicious PDF documents. Being written in Ruby, the core engine of Origami is totally scriptable and can be used for automated tasks on large sets of documents. A GTK graphical interfac...

[SECURITY] Fedora 9 Update: pdfjam-1.21-1.fc9

PDFjam is a small collection of shell scripts which provide a simple interface to some of the functionality of the excellent pdfpages package by Andreas Matthias for pdfLaTeX. At present the utilities available are: pdfnup, which allows PDF files to be "n-upped" in roughly the way that psnup does...

Re: Unpatchable Quicktime XSS

New MySpace XSS by Mx http://mxcore.com for more info What you need: Adobe Acrobat Professional 7.0 works A server to host the PDF in 1. Open up Adobe Acrobat Professional. 2. File Create PDF I did From File, but you can do whatever you want. This step explains itself pretty much. 3. You now have...