Lucene search
+L

1663 matches found

BDU FSTEC
BDU FSTEC
added 2021/03/25 12:0 a.m.8 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the issue of operations occurring outside of the buffer in memory. This allows attackers to trigger service failures.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the issue of operations going beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to cause servic...

4.3CVSS6.9AI score0.01719EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:0 a.m.9 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to lack of access control mechanisms. This allows attackers to enhance their privileges.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to lack of access control mechanisms. Exploiting these vulnerabilities can allow a malicious actor to enhance their...

9CVSS7.6AI score0.017EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:0 a.m.9 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the issue of executing code outside of the buffer memory. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the issue of code execution outside the buffer. Exploiting these vulnerabilities can allow a malicious actor to...

9.3CVSS8.2AI score0.02617EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:0 a.m.12 views

The vulnerability of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, is related to incorrect path name restrictions for restricted access catalogs. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to incorrect path name restrictions for access to restricted catalogs. Exploiting these vulnerabilities can allow an...

8.8CVSS7.9AI score0.03233EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:0 a.m.8 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the issue of executing code outside of the buffer memory. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the issue of code execution outside the buffer. Exploiting these vulnerabilities can allow a malicious actor to...

9.3CVSS8.2AI score0.02617EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:0 a.m.9 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Arbitrary code can be executed in the context of the current user using a specially crafte...

8.8CVSS7.4AI score0.02956EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/03/22 12:0 a.m.8 views

Foxit PhantomPDF 资源管理错误漏洞

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A memory misreference vulnerability exists in Foxit PhantomPDF when handling U3D objects in PDF files. The vulnerability stems from the program not verifying the existence of an object before performing an operation on it. An...

7.8CVSS6AI score0.02491EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/03/22 12:0 a.m.7 views

Foxit PhantomPDF 缓冲区错误漏洞

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. Foxit PhantomPDF suffers from an out-of-bounds read vulnerability when processing U3D objects in PDF files. The vulnerability is caused due to a lack of proper validation of user-supplied data, which could result in reading...

4.3CVSS5.9AI score0.02187EPSS
SaveExploits0References4
OSV
OSV
added 2021/03/19 4:15 p.m.1 views

DEBIAN-CVE-2021-27807

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions...

5.5CVSS6.7AI score0.02979EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/19 4:15 a.m.3 views

ALPINE-CVE-2021-25292

An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS ReDoS attack via a crafted PDF file because of a catastrophic backtracking regex...

6.5CVSS8.5AI score0.01635EPSS
SaveExploits0References1
PyPA
PyPA
added 2021/03/19 4:15 a.m.8 views

PYSEC-2021-38

An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS ReDoS attack via a crafted PDF file because of a catastrophic backtracking regex...

6.5CVSS7AI score0.01635EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/03/19 4:15 a.m.10 views

PYSEC-2021-38

An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS ReDoS attack via a crafted PDF file because of a catastrophic backtracking regex...

6.5CVSS5.8AI score0.01635EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/03/11 12:0 a.m.4 views

Pillow 安全漏洞

Pillow is a Python-based image processing library. Pillow version 8.1.1 previously contained a security vulnerability that could be exploited by attackers to conduct regular expression DoS ReDoS attacks via crafted PDF files...

6.5CVSS5.5AI score0.01635EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:0 a.m.7 views

The vulnerability of the GetFieldValue function implementation in the program for displaying text in Foxit Reader and the PDF editing program Foxit PhantomPDF allows a perpetrator to execute arbitrary code.

The vulnerability of the GetFieldValue function implementation in programs for displaying text in Foxit Reader and editing PDF files in Foxit PhantomPDF is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

10CVSS7.6AI score0.04689EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2021/03/09 3:15 p.m.5 views

CVE-2021-27591

When a user opens manipulated Portable Document Format .PDF format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

7.8CVSS5.8AI score0.01242EPSS
SaveExploits0References3
The Hacker News
The Hacker News
added 2021/02/23 10:46 a.m.8 views

Shadow Attacks Let Attackers Replace Content in Digitally Signed PDFs

Researchers have demonstrated a novel class of attacks that could allow a bad actor to potentially circumvent existing countermeasures and break the integrity protection of digitally signed PDF documents. Called "Shadow attacks" by academics from Ruhr-University Bochum, the technique uses the...

7.8CVSS7.5AI score0.02328EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/02/23 12:0 a.m.8 views

Polaris Office 数字错误漏洞

Polaris Office is an application system from Polaris Office Korea that provides greater convenience by improving file opening speed, storage reliability, and printing performance. A denial of service vulnerability exists in Polaris Office v9.102.66, which originates from a local denial of service...

5.5CVSS6AI score0.01663EPSS
SaveExploits1References2
OSV
OSV
added 2021/02/11 9:15 p.m.3 views

CVE-2021-21058

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by a Memory corruption vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary...

7.8CVSS7.6AI score0.02617EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/11 8:15 p.m.3 views

CVE-2021-21061

Acrobat Pro DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by a Use-after-free vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive...

3.3CVSS6.6AI score0.02006EPSS
SaveExploits0References1
Fedora
Fedora
added 2021/02/11 1:53 a.m.80 views

[SECURITY] Fedora 32 Update: xpdf-4.03-1.fc32

Xpdf is an X Window System based viewer for Portable Document Format PDF files. Xpdf is a small and efficient program which uses standard X fonts...

7.5CVSS1.8AI score0.02057EPSS
SaveExploits2
Rows per page
Query Builder