Lucene search
K

16 matches found

CNVD
CNVD
added 2021/11/11 12:0 a.m.15 views

pdftoxml heap buffer overflow vulnerability (CNVD-2021-89050)

pdftoxml is an open source PDF to XML converter. pdftoxml version 2.0 of the TextPage::dump function has a heap buffer overflow vulnerability. There is no detailed vulnerability details provided...

9.8CVSS2.6AI score0.02063EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/11/10 12:0 a.m.3 views

pdf2xml 缓冲区错误漏洞

pdftoxml is an open source PDF to XML converter. pdftoxml version 2.0 has a stack buffer overflow vulnerability in the getObjectStream component. No detailed vulnerability details are available at this time...

9.8CVSS5.9AI score0.01706EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/11/10 12:0 a.m.3 views

Pdf2xml 缓冲区错误漏洞

pdftoxml is an open source PDF to XML converter. pdftoxml version 2.0 of the TextPage::dump function has a heap buffer overflow vulnerability. There is no detailed vulnerability details provided...

9.8CVSS5.9AI score0.02063EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/11/10 12:0 a.m.3 views

Pdf2xml 缓冲区错误漏洞

pdftoxml is an open source PDF to XML converter. pdftoxml version 2.0 of the TextPage::addAttributsNode function has a heap buffer overflow vulnerability. No detailed vulnerability details are currently available...

9.8CVSS5.9AI score0.02063EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/07/21 12:0 a.m.4 views

PDF2JSON 资源管理错误漏洞

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages to JSON and XML formats on a page-by-page basis. PDF2JSON Gfx::doShowText has a security vulnerability. An attacker could exploit this vulnerability to cause a denial of service...

5.5CVSS5.7AI score0.00666EPSS
Exploits1References2
Prion
Prion
added 2017/02/28 3:59 p.m.13 views

Heap overflow

An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicitly trust an index within the specific font object and use it to write the font's name to a single object within an array of objects...

9.3CVSS7.2AI score0.01867EPSS
Exploits2References2Affected Software1
Prion
Prion
added 2017/02/28 3:59 p.m.15 views

Integer overflow

An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will attempt to convert each character from a font into a polygon and then attempt to rasterize these shapes. As the application attempts to iterate through the rows and...

9.3CVSS7.6AI score0.02116EPSS
Exploits2References2Affected Software1
Cvelist
Cvelist
added 2017/02/28 3:0 p.m.20 views

CVE-2016-8389

An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will attempt to convert each character from a font into a polygon and then attempt to rasterize these shapes. As the application attempts to iterate through the rows and...

8.8CVSS7.8AI score0.02116EPSS
Exploits2References2
Positive Technologies
Positive Technologies
added 2017/02/28 12:0 a.m.3 views

PT-2017-9654 · Iceni · Iceni Argus

Name of the Vulnerable Software and Affected Versions: Iceni Argus affected versions not specified Description: An exploitable arbitrary heap-overwrite issue exists when Iceni Argus attempts to convert a malformed PDF to XML. It explicitly trusts an index within the specific font object and uses ...

9.3CVSS8.1AI score0.01867EPSS
Exploits2References4
OSV
OSV
added 2017/02/27 9:59 p.m.1 views

CVE-2016-8386

An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the tool will attempt to use a size out of the font to search through a linked list of buffers to return. Due to a signedness issue, a buffer smaller than the...

7.8CVSS6.4AI score
Exploits0References2
NVD
NVD
added 2017/02/27 9:59 p.m.15 views

CVE-2016-8386

An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the tool will attempt to use a size out of the font to search through a linked list of buffers to return. Due to a signedness issue, a buffer smaller than the...

9.3CVSS8.3AI score0.0225EPSS
Exploits2References2
NVD
NVD
added 2017/02/27 9:59 p.m.17 views

CVE-2016-8385

An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF to XML a stack variable will be left uninitialized which will later be used to fetch a length that is used in a copy operation. In mo...

9.3CVSS8.3AI score0.0225EPSS
Exploits2References2
Cvelist
Cvelist
added 2017/02/27 9:0 p.m.14 views

CVE-2016-8386

An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the tool will attempt to use a size out of the font to search through a linked list of buffers to return. Due to a signedness issue, a buffer smaller than the...

8.8CVSS8AI score0.0225EPSS
Exploits2References2
Cvelist
Cvelist
added 2017/02/27 9:0 p.m.25 views

CVE-2016-8385

An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF to XML a stack variable will be left uninitialized which will later be used to fetch a length that is used in a copy operation. In mo...

8.8CVSS8AI score0.0225EPSS
Exploits2References2
Positive Technologies
Positive Technologies
added 2017/02/27 12:0 a.m.3 views

PT-2017-9651 · Iceni · Iceni Argus

Name of the Vulnerable Software and Affected Versions: Iceni Argus affected versions not specified Description: The issue is related to an uninitialized variable vulnerability that leads to a stack-based buffer overflow. This occurs when Iceni Argus attempts to convert a malformed PDF to XML,...

9.3CVSS8.3AI score0.0225EPSS
Exploits2References4
Talos
Talos
added 2017/02/27 12:0 a.m.39 views

Iceni Argus PDF Font-Encoding GlyphMap Adjustment Code Execution Vulnerability

Summary An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicitly trust an index within the specific font object and use it to write the font’s name to a single object within an array of objects. Due to ...

9.3CVSS8AI score0.01867EPSS
Exploits2
Rows per page
Query Builder