Foxit PDF Reader JavaScript Array.includes remote code execution vulnerability

Summary An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 9.4.1.16828. A specially crafted PDF document can trigger an out-of-memory condition which isn’t handled properly, resulting in arbitrary code execution. An attacke...

Adobe Acrobat/Reader Heap Overflow Vulnerability (CNVD-2019-28662)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. A heap overflow vulnerability exists in Adobe Acrobat/Reader. An attacker can exploit this vulnerability to execute arbitrary code...

Patch Tuesday, August 2019 Edition

Most Microsoft Windows abusers probably welcome the monthly ritual of applying security updates about as much as they look forward to going to the dentist: It always seems like you were there just yesterday, and you never quite know how it's all going to turn out. Fortunately, this month's patch...

Xpdf heap buffer overflow vulnerability (CNVD-2019-21457)

Xpdf is an open source PDF reader from Foo Labs. The product supports decoding LZW compressed format files and read encrypted PDF files. A buffer error vulnerability exists in Xpdf version 4.01.01. The vulnerability stems from a networked system or product that performs operations in memory witho...

Xpdf buffer overflow vulnerability (CNVD-2019-21463)

Xpdf is an open source PDF reader from Foo Labs. The product supports decoding LZW compressed format files and read encrypted PDF files. A buffer overflow vulnerability exists in the 'SplashXPath::strokeAdjust' function in the splash/SplashXPath.cc file in Xpdf version 4.01.01. The vulnerability...

Xpdf Buffer Error Vulnerability

Xpdf is an open source PDF reader from Foo Labs. The product supports decoding LZW compressed format files and read encrypted PDF files. A buffer error vulnerability exists in the 'PostScriptFunction::transform' function of the Function.cc file in Xpdf version 4.01.01. The vulnerability originate...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2019-22808)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat/Reader has an out-of-bounds read vulnerability. An attacker can exploit this vulnerability to obtain information...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2019-22821)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat/Reader has an out-of-bounds read vulnerability. An attacker can exploit this vulnerability to obtain information...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2019-22827)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat/Reader has an out-of-bounds read vulnerability. An attacker can exploit this vulnerability to obtain information...

Adobe Acrobat/Reader Memory Misreference Vulnerability (CNVD-2019-22804)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. A memory misreference vulnerability exists in Adobe Acrobat/Reader. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat/Reader Out-of-Bounds Write Vulnerability (CNVD-2019-22473)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat/Reader has an out-of-bounds write vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat/Reader Memory Misreference Vulnerability (CNVD-2019-21971)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. A memory misreference vulnerability exists in Adobe Acrobat/Reader. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat/Reader Arbitrary Code Execution Vulnerability (CNVD-2019-21654)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat/Reader has an arbitrary code execution vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat/Reader Memory Misreference Vulnerability (CNVD-2019-19837)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. A memory misreference vulnerability exists in Adobe Acrobat/Reader. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat and Reader Heap Overflow Vulnerability (CNVD-2019-16535)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat and Reader have a heap overflow vulnerability. An attacker can exploit this vulnerability to achieve arbitrary code execution...

Adobe Acrobat and Reader Type Obfuscation Vulnerability (CNVD-2019-16537)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat and Reader have a type confusion vulnerability. An attacker can exploit this vulnerability to achieve arbitrary code execution...

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2019-12260)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat and Reader have an out-of-bounds read vulnerability. An attacker can exploit this vulnerability to obtain information...

Adobe Acrobat Reader DC text field value remote code execution vulnerability — redux

Summary A specific JavaScript code embedded in a PDF file can lead to a heap corruption when opening a PDF document in Adobe Acrobat Reader DC 2019.8.20071. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need t...

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2019-10296)

Kingsoft PDF Reader is a PDF reading tool. Kingsoft PDF Reader has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by constructing a specific pdf file...

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2019-10300)

Kingsoft PDF Reader is a PDF reading tool. Kingsoft PDF Reader has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by constructing a specific pdf file...