Command Execution Vulnerability in PDF Master pc Client Software

XunRead PDF is a PDF reader with extremely fast startup speed and low memory consumption. A command execution vulnerability exists in the XunRead PDF Master pc client software, which can be exploited by an attacker to gain control of the server...

Threat Source newsletter for Sept. 17, 2020

Newsletter compiled by Jon Munshaw. Good afternoon, Talos readers. We’ve got a couple of vulnerabilities you should know about. Monday, we disclosed a bug in Google Chrome’s PDFium feature that opens the door for an adversary to execute remote code. Our researchers also discovered several...

CVE-2020-1568

A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

Remote code execution

A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

Microsoft Reveals New Innocent Ways Windows Users Can Get Hacked

Microsoft earlier today released its August 2020 batch of software security updates for all supported versions of its Windows operating systems and other products. This month's Patch Tuesday updates address a total of 120 newly discovered software vulnerabilities, of which 17 are critical, and th...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2020-46035)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat/Reader has an out-of-bounds read vulnerability that can be exploited by attackers to obtain information...

Microsoft Edge PDF Reader Remote Code Execution Vulnerability (CNVD-2020-61586)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A remote code execution vulnerability exists in Microsoft Edge PDF Reader, which stems from the program failing to properly handle objects in memory. An attacker can exploit the...

Adobe Acrobat/Reader Security Feature Bypass Vulnerability (CNVD-2020-46046)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat/Reader has a security feature bypass vulnerability that can be exploited by attackers to bypass security features...

Adobe Acrobat/Reader Buffer Overflow Vulnerability (CNVD-2020-46029)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat/Reader has a buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

Microsoft Edge PDF Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

PT-2020-3731 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: A remote code execution issue exists due to improper handling of objects in memory by the Microsoft Edge PDF Reader. This could allow an attacker to execute arbitrary code in the...

CVE-2020-1433

CVE-2020-1433 affects Microsoft Edge PDF Reader. The vulnerability is caused by the component’s improper handling of in-memory objects, enabling information disclosure. CVSS-3.1 base score 6.5 (Network, Low attack complexity, No privileges required, User interaction required; Confidentiality impa...

CVE-2020-1433

An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Information Disclosure Vulnerability'...

The vulnerability of the PDF Reader component of the Microsoft Edge browser, which allows a hacker to execute arbitrary code.

The vulnerability of the Windows operating system’s PDF library, specifically Microsoft Edge browsers, arises due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created Microsoft...

CVE-2020-1096

A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Remote Code Execution Vulnerability'...

Remote code execution

A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Remote Code Execution Vulnerability'...

CVE-2020-1096

CVE-2020-1096: Microsoft Edge PDF Reader remote code execution vulnerability. It arises when Edge PDF Reader improperly handles objects in memory, allowing an attacker to run arbitrary code in the current user’s context via specially crafted PDF content. The vulnerability could grant the attacker...

CVE-2020-1096

A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Remote Code Execution Vulnerability'...

Vulnerability Spotlight: Multiple vulnerabilities in Nitro Pro PDF reader

Aleksandar Nikolic and Cory Duplantis of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered two code execution vulnerabilities and an information disclosure flaw in Nitro Pro PDF reader. Nitro PDF allows users to save, read, sign and edit PDFs on...

Microsoft Edge PDF Reader Remote Code Execution Vulnerability

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A remote code execution vulnerability exists in Microsoft Edge PDF Reader that stems from the program failing to properly handle memory objects. An attacker could exploit the vulnerabilit...