CVE-2016-5159

An integer overflow, leading to a heap buffer overflow, was found in openjpeg, also affecting the PDF viewer in Chromium. A specially crafted JPEG2000 image could cause an incorrect calculation when allocating memory for code blocks, which could lead to a crash, or potentially, code execution...

The vulnerability of the PDF Viewer component in Firefox ESR and Firefox browsers allows attackers to escalate their privileges.

The vulnerability of the CaptureHandler component in Firefox ESR and Firefox exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the PDF Viewer component in Firefox ESR and Firefox browsers allows a hacker to execute arbitrary code.

The vulnerability of the PDF Viewer component in Firefox ESR and Firefox browsers is related to errors in code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

Xpdf buffer overflow vulnerability (CNVD-2019-31202)

Xpdf is an open source PDF reader from Foo Labs. The product supports decoding LZW compressed format files and read encrypted PDF files. A buffer overflow vulnerability exists in the IdentityFunction::transform of the Function.cc file in Xpdf version 4.01.01, which can be exploited by an attacker...

NewStart CGSL MAIN 4.05 : openjpeg Multiple Vulnerabilities (NS-SA-2019-0129)

The remote NewStart CGSL host, running version MAIN 4.05, has openjpeg packages installed that are affected by multiple vulnerabilities: - A vulnerability was found in the patch for CVE-2013-6045 for OpenJPEG. A specially crafted JPEG2000 image, when read by an application using OpenJPEG, could...

UBUNTU-CVE-2019-14291

An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA==6 case 3...

Foxit Reader < 9.6 Multiple Vulnerabilities

According to its version, the Foxit Reader application installed on the remote Windows host is prior to 9.6. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenab...

CVE-2019-13289

In Xpdf 4.01.01, there is a use-after-free vulnerability in the function JBIG2Stream::close located at JBIG2Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool...

UBUNTU-CVE-2019-13283

In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1::parse in fofi/FoFiType1.cc because it does not ensure the source string has a valid length before making a fixed-length copy. It can, for example, be triggered by sending a crafted PDF document to the...

Debian DLA-1838-1 : mupdf security update

Several minor issues have been fixed in mupdf, a lightweight PDF viewer tailored for display of high quality anti-aliased graphics. CVE-2018-5686 In MuPDF, there was an infinite loop vulnerability and application hang in the pdfparsearray function pdf/pdf-parse.c because EOF not having been...

Brave Software: Tor IP leak caused by the PDF Viewer extension in certain situations

A vulnerability was discovered in the PDF Viewer extension in Brave browser, where web requests made by the extension in Tor mode were not properly proxied under certain conditions. This could result in the user's real IP address being leaked to the server hosting the PDF file...

Fedora Update for mupdf FEDORA-2019-15af6a9a07

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: mupdf-1.15.0-1.fc29

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

[SECURITY] Fedora 30 Update: mupdf-1.15.0-1.fc30

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

Fedora Update for mupdf FEDORA-2019-befe3bd225

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Information Disclosure

Firefox is vulnerable to information disclosure attacks. A remote user could bypass same-origin restrictions in the PDF viewer to view ostensibly protected PDF files...

Buffer Overflow

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Memory Corruption

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Adobe Acrobat and Reader Type Obfuscation Vulnerability (CNVD-2019-16538)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat and Reader have a type confusion vulnerability. An attacker can exploit this vulnerability to achieve arbitrary code execution...

Xpdf PE Vulnerability (CNVD-2019-22438)

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. An FPE vulnerability exists in the ImageStream::ImageStream function in Stream.cc in Xpdf 4.01.01. No detailed vulnerability details are provided at this time...