Design/Logic Flaw

Use-after-free vulnerability in the pdfloadxref function in pdf/pdf-xref.c in MuPDF allows remote attackers to cause a denial of service crash via a crafted PDF file...

CVE-2016-6265

Use-after-free vulnerability in the pdfloadxref function in pdf/pdf-xref.c in MuPDF allows remote attackers to cause a denial of service crash via a crafted PDF file...

Foxit Reader and PhantomPDF Remote Code Execution Vulnerability (CNVD-2016-06999)

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. A security vulnerability exists in Foxit Reader and PhantomPDF 8.0.0.624 and earlier versions, which can be triggered by a heap memory...

CVE-2016-3319

The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allows remote attackers to execute arbitrary code via a crafted PDF file, aka "Microsoft PDF Remote Code Execution Vulnerability."...

August 2016 Microsoft Patch Tuesday Security Bulletins

A tricky vulnerability patched today in the Windows PDF Library could have put Microsoft Edge users on Windows 10 systems at risk for remote code execution attacks. Edge automatically renders PDF content when it’s set as a computer’s default browser, unlike most other browsers; the feature means...

MS16-102: Description of the security update for Microsoft Windows PDF library: August 9, 2016

None None...

MS16-102: Security update for Microsoft Windows PDF library: August 9, 2016

Resolves a vulnerability in Windows that could allow remote code execution if a user views specially crafted PDF content online or opens a specially crafted PDF document.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code execution ...

MuPDF Denial of Service Vulnerability

MuPDF is a PDF format analyzer used to read PDF files and create Fitz tree diagrams. MuPDF suffers from a denial of service vulnerability that can be exploited by an attacker to crash an affected application, resulting in a denial of service...

Oracle OIT IX SDK libvs_pdf Tj Operator Denial of Service Vulnerability

Talos Vulnerability Report TALOS-2016-0098 Oracle OIT IX SDK libvspdf Tj Operator Denial of Service Vulnerability July 19, 2016 CVE Number CVE-2016-3576 DESCRIPTION When parsing a specialy crafted PDF document, a NULL pointer dereference leading to a process termination. A pointer value from a...

CVE-2016-0301

Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277, CVE-2016-0278, and CVE-2016-0279...

PT-2016-2893 · Microsoft · Edge +2

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 8.1, 10 Gold, and 10 1511 Microsoft Edge Microsoft Windows Server versions 2012 Gold and 2012 R2 Description: A issue allows remote attackers to obtain sensitive information from process memory via a crafted PDF...

Foxit Reader and Foxit PhantomPDF Arbitrary Code Execution Vulnerability (CNVD-2016-00994)

Foxit Reader is a PDF document reader.Foxit PhantomPDF is a commercial version. Foxit Reader and Foxit PhantomPDF contain a security vulnerability that can be exploited by remote attackers to construct malicious files that can be parsed by the user, crashing the application or executing arbitrary...

CVE-2016-0934

Use-after-free vulnerability in AGM.dll in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via a multiple-layer PDF...

The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, allow attackers to circumvent JavaScript restrictions.

The vulnerability in the implementation of the Function apply in PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as in PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control for certain functions...

Adobe Acrobat/Reader Javascript API Execution Bypass Vulnerability (CNVD-2015-06716)

Adobe Reader/Acrobat is a popular application for working with PDF files. An unspecified security bypass vulnerability exists in Adobe Reader/Acrobat. The vulnerability allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could bypass Javascript API...

The vulnerability of the Adobe Reader PDF viewer program, which allows a hacker to circumvent existing access restrictions

The vulnerability of the Adobe Reader PDF viewer program is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to circumvent existing access restrictions remotely...

Google Chrome PDF File URL Forgery Vulnerability

Google Chrome is an open source WEB browser. Google Chrome processing PDF documents have security vulnerabilities that allow attackers to build malicious WEB pages, inducing users to parse them, and can spoof URLs for spoofing attacks...

The vulnerability of Adobe Acrobat DC, a PDF editing software, allows a hacker to circumvent access restrictions.

The vulnerability of the Adobe Acrobat DC PDF editing software is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass restrictions on access to the JavaScript API...

The vulnerability of the Adobe Reader PDF viewer program allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Reader PDF viewer program relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Adobe Reader PDF viewer program allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the Adobe Reader PDF viewer program arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service interruptions remotely...