CVE-2024-47580

CVE-2024-47580 affects SAP NetWeaver AS Java (Adobe Document Service). An attacker authenticated as an administrator can use an exposed webservice to create a PDF with an embedded attachment; by forcing the file to be an internal server file and downloading the PDF, they can read arbitrary server...

Adobe Acrobat Reader 缓冲区错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. Adobe Acrobat Reader suffers from a buffer error vulnerability that stems from the inclusion of an out-of-bounds read vulnerability. An attacker exploiting this...

SAP Adobe Document Service 安全漏洞

SAP Adobe Document Service SAP ADS is a document management service from SAP, Germany. A security vulnerability exists in SAP Adobe Document Service, which originates from an attacker authenticated as an administrator, who can use a publicly available Web service to upload or download customized...

Adobe Acrobat Reader 缓冲区错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. Adobe Acrobat Reader suffers from a buffer error vulnerability that stems from the inclusion of an out-of-bounds read vulnerability. An attacker exploiting this...

CVE-2024-46657

Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...

SAP Adobe Document Service 安全漏洞

SAP Adobe Document Service SAP ADS is a document management service from SAP, Germany. A security vulnerability exists in SAP Adobe Document Service, which originates from an attacker authenticated as an administrator, who can create PDFs with embedded attachments using publicly available Web...

Adobe PDFL SDK 缓冲区错误漏洞

The Adobe PDFL SDK is a software development kit for OEMs, ISVs, system integrators, and enterprise IT developers from Adobe, Inc. that contains a powerful set of functions for developing third-party solutions and workflows based on the Adobe PDF standard. A buffer error vulnerability exists in...

Adobe Acrobat Reader 缓冲区错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has a security vulnerability that can be exploited by attackers to cause a sensitive memory leak...

Artifex Software MuPDF 安全漏洞

Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A security vulnerability exists in Artifex Software MuPDF v1.24.9, which originates from the discovery of the inclusion of a segmentation error via the component /tools/pdfextract.c. The vulnerability can be...

PT-2024-9407 · Sap · Sap Netweaver As Java

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS for Java affected versions not specified Description: The issue allows an attacker authenticated as an administrator to use an exposed webservice to create a PDF with an embedded attachment. By specifying the file to be an...

APSB24-98 : Security update available for Adobe PDFL SDK

Adobe has released an update for the Adobe PDF Library Software Development Kit SDK for Windows, Linux and macOS. Adobe PDFL SDK contains a set of functions for developing third-party solutions and workflows built upon the Adobe PDF standard. This update resolves a critical vulnerability that cou...

CVE-2024-46657

Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...

CVE-2024-46657

Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...

CVE-2024-11268

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash or could lead to an arbitrary memory leak...

CVE-2024-11268

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash or could lead to an arbitrary memory leak...

CVE-2024-11268 PDF File Parsing Vulnerability in Autodesk Revit

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash or could lead to an arbitrary memory leak...

CVE-2024-11268

CVE-2024-11268 concerns Autodesk Revit. A maliciously crafted PDF parsed by Revit can trigger an Out-of-Bounds Read, with the impact described as a crash or arbitrary memory leak. Documented measurements assign a Medium base score (CVSS 3.1) with local attack vector and user interaction required....

CVE-2024-11268 PDF File Parsing Vulnerability in Autodesk Revit

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash or could lead to an arbitrary memory leak...

Autodesk Revit 缓冲区错误漏洞

Autodesk Revit is a suite of building information modeling software from the US company Autodesk. A security vulnerability exists in Autodesk Revit that originates when Autodesk Revit parses a maliciously crafted PDF file, potentially forcing an out-of-bounds read. An attacker can exploit this...

CVE-2024-11276

The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.2.136 due to insufficient input sanitization and output escaping. This makes it possible fo...