Lucene search
+L

1678 matches found

CNVD
CNVD
added 2019/11/27 12:00 a.m.14 views

Google Chrome memory misreference vulnerability (CNVD-2019-42589)

Google Chrome is the United States Google Google company's a Web browser. PDFium is one of the open source PDF rendering engine. Google Chrome 76.0.3809.100 previous version of a security vulnerability. Remote attackers can exploit the vulnerability through specially crafted PDF files to cause he...

5.5CVSS8.7AI score0.00526EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/11/05 12:00 a.m.5 views

PT-2019-6413 · Artifex +3 · Artifex Ghostscript +3

Name of the Vulnerable Software and Affected Versions: Artifex Ghostscript version 9.50 Description: The issue is related to a Buffer Overflow vulnerability in the clj media size function in the devices/gdevclj.c component. This vulnerability can be exploited by remote attackers via the opening o...

7.8CVSS6AI score0.00811EPSS
SaveExploits2References32
OSV
OSV
added 2019/10/30 9:15 p.m.8 views

DEBIAN-CVE-2010-0206

xpdf allows remote attackers to cause a denial of service NULL pointer dereference and crash in the way it processes JBIG2 PDF stream objects...

5.5CVSS5.7AI score0.01065EPSS
SaveExploits0References1
Fedora
Fedora
added 2019/10/25 6:09 p.m.88 views

[SECURITY] Fedora 29 Update: xpdf-4.02-1.fc29

Xpdf is an X Window System based viewer for Portable Document Format PDF files. Xpdf is a small and efficient program which uses standard X fonts...

7.8CVSS1.8AI score0.01293EPSS
SaveExploits8
Fedora
Fedora
added 2019/10/25 5:04 p.m.55 views

[SECURITY] Fedora 30 Update: xpdf-4.02-1.fc30

Xpdf is an X Window System based viewer for Portable Document Format PDF files. Xpdf is a small and efficient program which uses standard X fonts...

7.8CVSS1.8AI score0.01293EPSS
SaveExploits8
CNVD
CNVD
added 2019/10/23 12:00 a.m.10 views

Foxit PhantomPDF Buffer Overflow Vulnerability (CNVD-2019-38059)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. The process of converting DXF files to PDF in Foxit PhantomPDF suffers from a buffer overflow vulnerability, which arises from the program failing to validate the length of data before copying the user-submitted data to a...

8.8CVSS8.1AI score0.05466EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/16 12:00 a.m.12 views

Adobe Acrobat/Reader Memory Misreference Vulnerability (CNVD-2019-35627)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader has a memory misreference vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

8.8CVSS7.4AI score0.03637EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/09 9:15 p.m.8 views

CVE-2019-5048

A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malicious file...

7.8CVSS7.4AI score0.02282EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2019/10/09 12:00 a.m.8 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execut...

10CVSS6AI score0.06525EPSS
SaveExploits0References3
Fedora
Fedora
added 2019/09/22 1:23 a.m.37 views

[SECURITY] Fedora 31 Update: ghostscript-9.27-1.fc31

This package provides useful conversion utilities based on Ghostscript soft ware, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Syste ms' PostScript PS and Portable Document Format PDF page description...

9.8CVSS1.9AI score0.41592EPSS
SaveExploits5
OSV
OSV
added 2019/09/18 9:15 p.m.9 views

CVE-2019-5066

An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.PDF 19.2 for C++. A specially crafted PDF can cause a dangling heap pointer, resulting in a use-after-free condition. To trigger this vulnerability, a specifically crafted PDF document nee...

9.8CVSS7.3AI score0.02375EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2019/09/16 12:00 a.m.53 views

Oracle Linux 8 : poppler (ELSA-2019-2713)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2713 advisory. 0.66.0-11.el80.12 - Ignore dict Length if it is broken - Resolves: 1741146 0.66.0-11.el80.11 - Check whether input is RGB in PSOutputDev::checkPageSlic...

9.8CVSS7AI score0.03518EPSS
SaveExploits8References13
RedHat Linux
RedHat Linux
added 2019/09/12 12:17 p.m.48 views

poppler: heap-based buffer overflow in function ImageStream::getLine() in Stream.cc

A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impa...

8.8CVSS6AI score0.03473EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2019/08/30 12:00 a.m.47 views

CentOS 7 : evince / okular / poppler (CESA-2019:2022)

An update for poppler, evince, and okular is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.8CVSS6.7AI score0.03518EPSS
SaveExploits9References15
OpenVAS
OpenVAS
added 2019/08/23 12:00 a.m.40 views

Fedora Update for ghostscript FEDORA-2019-22f1c93255

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.2AI score0.02642EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/08/15 12:00 a.m.36 views

Adobe Acrobat/Reader Heap Overflow Vulnerability (CNVD-2019-28661)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. A heap overflow vulnerability exists in Adobe Acrobat/Reader. An attacker can exploit this vulnerability to execute arbitrary code...

9.8CVSS7.5AI score0.16837EPSS
SaveExploits4References1
CNVD
CNVD
added 2019/08/15 12:00 a.m.31 views

Adobe Acrobat/Reader Buffer Overflow Vulnerability (CNVD-2019-30094)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader has a buffer overflow vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

9.8CVSS7.8AI score0.3456EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/08/15 12:00 a.m.10 views

Adobe Acrobat/Reader Integer Overflow Vulnerability (CNVD-2019-30088)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. An integer overflow vulnerability exists in Adobe Acrobat/Reader. An attacker can exploit this vulnerability to obtain information...

7.5CVSS7AI score0.03407EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/08/15 12:00 a.m.11 views

Adobe Acrobat/Reader Out-of-Bounds Write Vulnerability (CNVD-2019-29559)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader has an out-of-bounds write vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

9.8CVSS7.6AI score0.03828EPSS
SaveExploits1References1
OSV
OSV
added 2019/08/12 11:35 a.m.4 views

USN-4091-1 poppler vulnerability

It was discovered that poppler incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service...

7.5CVSS6.8AI score0.02679EPSS
SaveExploits1References2
Rows per page
Query Builder