Lucene search
+L

581 matches found

OSV
OSV
added 2016/06/26 2:59 p.m.5 views

CVE-2016-0301

Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277, CVE-2016-0278, and CVE-2016-0279...

7.8CVSS6.4AI score0.0282EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2016/06/14 12:0 a.m.2 views

PT-2016-2893 · Microsoft · Edge +2

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 8.1, 10 Gold, and 10 1511 Microsoft Edge Microsoft Windows Server versions 2012 Gold and 2012 R2 Description: A issue allows remote attackers to obtain sensitive information from process memory via a crafted PDF...

6.5CVSS5.9AI score0.2363EPSS
Exploits0References10
CNVD
CNVD
added 2016/02/08 12:0 a.m.2 views

Foxit Reader and Foxit PhantomPDF Arbitrary Code Execution Vulnerability (CNVD-2016-00994)

Foxit Reader is a PDF document reader.Foxit PhantomPDF is a commercial version. Foxit Reader and Foxit PhantomPDF contain a security vulnerability that can be exploited by remote attackers to construct malicious files that can be parsed by the user, crashing the application or executing arbitrary...

7.2AI score
Exploits0References1
OSV
OSV
added 2016/01/14 5:59 a.m.4 views

CVE-2016-0934

Use-after-free vulnerability in AGM.dll in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via a multiple-layer PDF...

8.8CVSS6.1AI score0.06796EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2015/10/29 12:0 a.m.6 views

The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, allow attackers to circumvent JavaScript restrictions.

The vulnerability in the implementation of the Function apply in PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as in PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control for certain functions...

9.3CVSS5.7AI score0.0643EPSS
Exploits0References3Affected Software2
CNVD
CNVD
added 2015/10/15 12:0 a.m.4 views

Adobe Acrobat/Reader Javascript API Execution Bypass Vulnerability (CNVD-2015-06716)

Adobe Reader/Acrobat is a popular application for working with PDF files. An unspecified security bypass vulnerability exists in Adobe Reader/Acrobat. The vulnerability allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could bypass Javascript API...

6.8CVSS6.8AI score0.0643EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2015/07/31 12:0 a.m.8 views

The vulnerability of the Adobe Reader PDF viewer program, which allows a hacker to circumvent existing access restrictions

The vulnerability of the Adobe Reader PDF viewer program is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to circumvent existing access restrictions remotely...

7.5CVSS5.4AI score0.05065EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2015/07/24 12:0 a.m.7 views

Google Chrome PDF File URL Forgery Vulnerability

Google Chrome is an open source WEB browser. Google Chrome processing PDF documents have security vulnerabilities that allow attackers to build malicious WEB pages, inducing users to parse them, and can spoof URLs for spoofing attacks...

4.3CVSS9.3AI score0.01835EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2015/07/22 12:0 a.m.9 views

The vulnerability of the Adobe Reader PDF viewer program allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the Adobe Reader PDF viewer program arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service interruptions remotely...

10CVSS6.2AI score0.05589EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/07/22 12:0 a.m.7 views

The vulnerability of Adobe Acrobat DC, a PDF editing software, allows a hacker to circumvent access restrictions.

The vulnerability of the Adobe Acrobat DC PDF editing software is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass restrictions on access to the JavaScript API...

10CVSS5.5AI score0.05765EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2015/07/22 12:0 a.m.9 views

The vulnerability of the Adobe Reader PDF viewer program allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Reader PDF viewer program relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS5.9AI score0.05688EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2015/07/16 12:0 a.m.6 views

Adobe Reader/Acrobat Denial of Service Vulnerability (CNVD-2015-04595)

Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. A denial of service vulnerability exists in Adobe Reader/Acrobat that could allow an attacker to execute arbitrary code or cause a denial of service via unspecified vectors...

10CVSS7.7AI score0.05589EPSS
Exploits0References1
CNVD
CNVD
added 2015/05/14 12:0 a.m.9 views

Adobe Reader/Acrobat Javascript API Execution Limit Bypass Vulnerability (CNVD-2015-03079)

Adobe Reader/Acrobat are popular applications for processing PDF files. A vulnerability exists in Adobe Reader/Acrobat's handling of special PDF files, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into parsing them, which can bypass...

10CVSS7.6AI score0.09917EPSS
Exploits0References1
CVE
CVE
added 2015/01/30 11:0 a.m.49 views

CVE-2014-8816

CVE-2014-8816 affects Apple OS X CoreGraphics. A crafted PDF could trigger memory corruption, leading to remote code execution or an application crash. The issue is fixed in OS X 10.10.2 and Security Update 2015-001; apply the Yosemite 10.10.2 update or the corresponding security update to mitiga...

6.8CVSS5.3AI score0.02132EPSS
Exploits0References4Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.21 views

Adobe Reader for Android 11.1.3 - Arbitrary JavaScript Execution

No description provided by source. ------------------------------------------------------------------------ Adobe Reader for Android exposes insecure Javascript interfaces ------------------------------------------------------------------------ Yorick Koster, April 2014...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2014/04/15 12:0 a.m.21 views

Adobe Reader for Android 11.1.3 - Arbitrary JavaScript Execution

Adobe Reader for Android 11.1.3 - Arbitrary JavaScript Execution ------------------------------------------------------------------------ Adobe Reader for Android exposes insecure Javascript interfaces ------------------------------------------------------------------------ Yorick Koster, April...

0.3AI score
Exploits0
Check Point Advisories
Check Point Advisories
added 2014/03/31 12:0 a.m.5 views

Adobe Reader Libtiff TIFFFetchShortPair Stack Buffer Overflow - Ver2 (CVE-2010-0188)

A buffer overflow vulnerability has been reported in the way Adobe Acrobat. The vulnerability is due to a boundary checks error while parsing crafted PDF documents. A remote attacker could exploit this vulnerability by enticing target users to open a malicious PDF document in a vulnerable version...

9.3CVSS7.4AI score0.88246EPSS
Exploits12
Tenable Nessus
Tenable Nessus
added 2013/10/09 12:0 a.m.36 views

Adobe Reader 11.0.4 Crafted PDF File Handling JavaScript Scheme URI Execution (APSB13-25)

The version of Adobe Reader installed on the remote host is 11.0.4. It is, therefore, affected by a flaw in the handling of specially crafted PDF files. This could allow an attacker to launch JavaScript URI schemes. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid7034...

9.3CVSS5.6AI score0.03641EPSS
Exploits0References2
exploitpack
exploitpack
added 2012/10/01 12:0 a.m.26 views

Foxit Reader 5.4.3.0920 - Crash (PoC)

Foxit Reader 5.4.3.0920 - Crash PoC Title : Foxit Reader suffers from Division By Zero Version : 5.4.3.0920 Date : 2012-09-28 Vendor : http://www.foxitsoftware.com/ Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 Bug : ---- division by zero vulnerabili...

7.4AI score
Exploits0
Cvelist
Cvelist
added 2012/09/26 10:0 a.m.31 views

CVE-2012-2890

Use-after-free vulnerability in the PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document...

6.8AI score0.01235EPSS
Exploits0References6
Rows per page
Query Builder