CVE-2018-16294

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16295, CVE-2018-16296, and CVE-2018-16297. A specially crafted PDF document can...

CVE-2018-11797

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

Denial of service vulnerability in Kingsoft pdf reader (CNVD-2018-20702)

Kingsoft PDF Reader is a compact and stable PDF reading tool. Kingsoft pdf reader has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by embedding a specific jpeg2000 image...

Artifex MuPDF Denial of Service Vulnerability (CNVD-2020-54496)

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A security vulnerability exists in the 'fzappendbyte' function in the fitz/buffer.c file in Artifex MuPDF version 1.13.0. A remote attacker can exploit this vulnerability to cause a denial of service segmentation error with th...

CVE-2018-14290

CVE-2018-14290 refers to a heap-based buffer overflow in Foxit Reader (notably 9.0.1.5096 and earlier) triggered during PDF parsing due to insufficient validation of the length of user-controlled data. The flaw allows remote code execution under the process’s context when a user opens a malicious...

@bitacode/apispecmd-ts (=0.0.2), @cjser/gulp-markdown-pdf (=9.0.0-cjser.2) +63 more potentially affected by CVE-2018-3770 via markdown-pdf (>=0.1.1 <=8.1.1)

markdown-pdf NPM version =0.1.1, =1.0.0, =1.0.0, =1.0.6, =1.2.151, =1.0.1, =1.17.0, =2.0.0, =0.1.0, =2.0.0, =2.1.0 and more Source cves: CVE-2018-3770 Source advisory: OSV:GHSA-P7C9-JQHQ-VR3V...

Foxit Reader Buffer Overflow Vulnerability (CNVD-2018-14093)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. An out-of-bounds reading vulnerability exists in the handling of PDF documents in Foxit Reader 9.1.0.5096 and earlier versions for Windows platforms, where the program fails to...

Adobe Reader PDF Local Request Injection Vulnerability

Adobe reader is a popular application for working with PDF files. A local request injection vulnerability exists in Adobe Reader PDF. An attacker can exploit this vulnerability to obtain sensitive information...

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2018-14481)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have an out-of-bounds read vulnerability. An attacker can exploit this vulnerability to obtain information...

Adobe Acrobat and Reader Heap Overflow Vulnerability (CNVD-2018-14924)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have a heap overflow vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat and Reader Heap Overflow Vulnerability (CNVD-2018-12937)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have a heap overflow vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability (CNVD-2018-14938)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have an out-of-bounds write vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability (CNVD-2018-14929)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have an out-of-bounds write vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2018-13515)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have an out-of-bounds read vulnerability. An attacker can exploit this vulnerability to obtain information...

Adobe Acrobat Reader DC JSON Stringify Remote Code Execution Vulnerability

Summary A specific JavaScript code embedded in a PDF file can lead to a use-after-free condition when opening a PDF document in Adobe Acrobat Reader DC 2018.011.20038. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim...

SUSE-SU-2018:1884-1 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2018-10194: The settextdistance function did not prevent overflows in text-positioning calculation, which allowed remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted P...

Foxes Among Us :: Foxit Reader Vulnerability Discovery and Exploitation

After discovering over 100 vulnerabilities in Foxit Reader, I figured it was about time I shared a full exploit chain that defeats ASLR and DEP. The first vulnerability is an uninitialized buffer that I found independently and was later killed by bit from meepwn. I leveraged this for an informati...

Denial Of Service (DoS)

libpoppler.so is vulnerabler to denial of service DoS attacks. A malicious user can pass a pdf file with a out-of-bounds dictionary index to the application to cause a buffer overflow, crashing the application...

Foxit Reader and PhantomPDF Remote Code Execution Vulnerability (CNVD-2018-11901)

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. A security vulnerability exists in the parsing of u3d images in PDF files in Foxit Reader prior to 9.1 and PhantomPDF prior to 9.1, which stems from the program failing to...

CVE-2018-7406

An issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1. This vulnerability allows remote attackers to execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...