Lucene search
+L

1008 matches found

CNVD
CNVD
added 2016/05/11 12:0 a.m.6 views

Adobe Reader DC U3D Out-of-Bounds Read Remote Code Execution Vulnerability

Adobe Acrobat Reader DC is the United States of America Ordoby Adobe company's set of tools for viewing, printing and annotating PDF. An out-of-bounds read remote code execution vulnerability exists in Adobe Reader DC U3D, which can be exploited by an attacker to execute arbitrary code and...

10CVSS8.5AI score0.0615EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/05/11 12:0 a.m.24 views

Adobe Acrobat Reader DC Restriction Bypass Vulnerability (CNVD-2016-03130)

Adobe Acrobat Reader DC is the United States of America Odooby Adobe company's set of tools for viewing, printing and annotating PDF. A security vulnerability exists in Adobe Acrobat Reader DC that allows an attacker to bypass restrictions on the Javascript API executable...

10CVSS6.8AI score0.06316EPSS
SaveExploits0References1
exploitpack
exploitpack
added 2016/05/10 12:0 a.m.36 views

Adobe Reader DC 15.010.20060 - Memory Corruption

Adobe Reader DC 15.010.20060 - Memory Corruption Title: Adobe Reader DC = 15.010.20060 - Memory corruption Application: Adobe Reader DC Version: 15.010.20060 and earlier versions Platform: Windows and Macintosh Software Link: https://acrobat.adobe.com/ca/fr/acrobat/pdf-reader.html Date: May 10,...

10CVSS0.3AI score0.17411EPSS
SaveExploits3
OpenVAS
OpenVAS
added 2016/05/06 12:0 a.m.28 views

RedHat Update for firefox RHSA-2015:1581-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.68657EPSS
SaveExploits8References4
Hacker One
Hacker One
added 2016/04/15 12:37 p.m.21 views

ownCloud: Open Redirector via (apps/files_pdfviewer) for un-authenticated users.

Affected Products: OWNCLOUD https://demo.owncloud.org/index.php/apps/filespdfviewer Version Tested: v1.0.712, other versions might be vulnerable Class: Open Redirector Remote: Yes A non authenticated user can be easily tricked into following one of the following links in order to download a...

0.9AI score
SaveExploits0
hackapp
hackapp
added 2016/04/01 9:21 a.m.12 views

Google PDF Viewer - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Google PDF Viewer published at the 'play' market has multiple vulnerabilities...

1.1AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/31 12:0 a.m.7 views

The vulnerabilities of PDF viewer programs such as Adobe Reader, Document Cloud, Adobe Reader, and programs for editing PDF files like Adobe Acrobat, Document Cloud allow attackers to enhance their privileges.

The vulnerabilities of PDF viewer programs such as Adobe Reader, Document Cloud, and Adobe Acrobat, as well as PDF editing programs like Adobe Acrobat Document Cloud, are related to the use of an insecure search path. Exploiting these vulnerabilities by deploying a Trojan DLL file can allow local...

7.2CVSS7.8AI score0.01098EPSS
SaveExploits0References2Affected Software2
CNVD
CNVD
added 2016/02/14 12:0 a.m.3 views

Foxit Reader GpRuntime::GpLock::GpLock Memory Misreference Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. A security vulnerability exists in the way Foxit Reader uses the Gdiplus API, constructing PDFs that force the use of suspended pointers that have been released in GpRuntime::GpLock::GpLock. An attacker could exploit this...

7.7AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2015/12/06 1:59 a.m.29 views

CVE-2015-6776

The opjdwtdecode1 functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during a discrete wavele...

6.8CVSS7.2AI score0.0146EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2015/11/26 12:0 a.m.4 views

The vulnerability of Google Chrome allows a hacker to circumvent existing access restrictions or download plugins.

The vulnerability of the PDF viewer component in Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to circumvent existing access restrictions or download the plugin by manipulating the pdf.js and outofprocessinstance.cc...

7.5CVSS7.7AI score0.01864EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/11/23 12:0 a.m.30 views

openSUSE Security Update : Chromium (openSUSE-2015-788)

Chromium was updated to 46.0.2490.86 to fix one security issue and bugs. The following vulnerability was fixed : - CVE-2015-1302: Information leak in PDF viewer boo954579 The following bug fix udpates are included : - boo950957: Change the default homepage based on the new landing page for the...

7.5CVSS8AI score0.01864EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2015/11/17 12:0 a.m.23 views

Mageia: Security Advisory (MGASA-2015-0448)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.6AI score0.01864EPSS
SaveExploits0References4
OSV
OSV
added 2015/11/16 9:36 p.m.11 views

MGASA-2015-0448 Updated chromium-browser-stable packages fix security vulnerabilities

Updated chromium-browser-stable packages fix security vulnerabilities: The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin...

7.5CVSS9.3AI score0.01864EPSS
SaveExploits0References3
Mageia
Mageia
added 2015/11/16 9:36 p.m.37 views

Updated chromium-browser-stable packages fix security vulnerabilities

Updated chromium-browser-stable packages fix security vulnerabilities: The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin...

7.5CVSS8.8AI score0.01864EPSS
SaveExploits0References2
ArchLinux
ArchLinux
added 2015/11/13 12:0 a.m.36 views

chromium: information leakage

The PDF viewer does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and outofprocessinstance.cc...

7.5CVSS4.5AI score0.01864EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2015/11/13 12:0 a.m.47 views

Google Chrome PDF Viewer Security Bypass Vulnerability (Nov 2015) - Linux

Google Chrome is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

7.5CVSS9.3AI score0.01864EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2015/11/13 12:0 a.m.28 views

Google Chrome PDF Viewer Security Bypass Vulnerability (Nov 2015) - Mac OS X

Google Chrome is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

7.5CVSS9.3AI score0.01864EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2015/11/13 12:0 a.m.26 views

Google Chrome PDF Viewer Security Bypass Vulnerability (Nov 2015) - Windows

Google Chrome is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

7.5CVSS9.3AI score0.01864EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2015/11/12 12:0 a.m.25 views

FreeBSD : chromium -- multiple vulnerabilities (f0b9049f-88c4-11e5-aed7-00262d5ed8ee)

Google Chrome Releases reports : 520422 High CVE-2015-1302: Information leak in PDF viewer. Credit to Rob Wu. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques...

7.5CVSS8.2AI score0.01864EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2015/11/11 11:59 a.m.28 views

CVE-2015-1302

The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and outofprocessinstance.cc...

7.5CVSS7.2AI score0.01864EPSS
SaveExploits0References2
Rows per page
Query Builder