The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to execute arbitrary code.

The vulnerability of the JBIG2 image compression module in PDF viewing and editing software such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to trigger service interruptions.

The vulnerability of JPEG 2000 stream parser programs for viewing and editing PDF files from Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause service interruptions...

feh 'src/wallpaper.c' integer overflow vulnerability

feh is an image viewing tool on the Linux command line. An integer overflow vulnerability exists in the wallpaper.c file in versions of feh prior to 2.18.3. An attacker could exploit this vulnerability to cause a denial of service out-of-bounds heap read...

CVE-2017-3230

Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware subcomponent: Map Builder. Supported versions that are affected are 11.1.1.9, 12.2.1.1 and 12.2.1.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to...

[SECURITY] Fedora 26 Update: mupdf-1.10a-5.fc26

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

Hoozin Viewer vulnerable to buffer overflow

Overview Hoozin Viewer provided by ICON CORPORATION contains a buffer overflow vulnerability CWE-121. Touma Hatano reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact If a user views a malicious page, arbitrary...

JVN#93931029: Hoozin Viewer vulnerable to buffer overflow

Hoozin Viewer provided by ICON CORPORATION contains a buffer overflow vulnerability CWE-121. Impact If a user views a malicious page, arbitrary code may be executed. Solution Update the Software Update to the latest version according to the information provided by the developer. Products Affected...

Apple Mac OS X Multiple Vulnerabilities-02 (Apr 2017)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 899-1] feh security update

Package : feh Version : 2.3-2+deb7u1 CVE ID : CVE-2017-7875 Debian Bug : 860367 Tobias Stoeckmann discovered it was possible to trigger an out-of-boundary heap write with the image viewer feh while receiving an IPC message. For Debian 7 "Wheezy", these problems have been fixed in version...

[SECURITY] Fedora 25 Update: mupdf-1.10a-5.fc25

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

CVE-2015-8284

SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions...

Code injection

SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions...

CVE-2015-8284

SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions...

CVE-2015-8284

SeaWell Networks Spectrum SDC 02.05.00 contains an improper authorization vulnerability (CVE-2015-8284) that could allow remote viewer accounts to perform administrative actions, including user management and access to device configuration files. Root cause: insufficient access control. Impact: u...

WordPress pdfjs-viewer-shortcode plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress pdfjs-viewer-shortcode plugin, where the program fails to...

PoshC2 - Powershell C2 Server and Implants

PoshC2 is a proxy aware C2 framework written completely in PowerShell to aid penetration testers with red teaming, post-exploitation and lateral movement. The tools and modules were developed off the back of our successful PowerShell sessions and payload types for the Metasploit Framework...

VNC Viewer - Remote Desktop - Dangerous filesystem permissions, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application VNC Viewer - Remote Desktop published at the 'play' market has multiple vulnerabilities...

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel spreadsheet editor, the Microsoft SharePoint Server enterprise application suite, and the Microsoft Excel Viewer allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel spreadsheet editor, the Microsoft SharePoint Server enterprise application, and the Microsoft Excel Viewer viewer arises due to an operation that occurs outside of the buffer in memory. Exploitation of this...

Scientific Linux Security Update : tigervnc on SL6.x i386/x86_64 (20170321)

Security Fixes : - A denial of service flaw was found in the TigerVNC's Xvnc server. A remote unauthenticated attacker could use this flaw to make Xvnc crash by terminating the TLS handshake process early. CVE-2016-10207 - A buffer overflow flaw, leading to memory corruption, was found in TigerVN...

Novell GroupWise Cross-Site Scripting Vulnerability (CNVD-2017-05134)

Novell GroupWise is a collaborative communication system from Novell. The system provides collaborative communication services such as e-mail, scheduling, instant messaging, task management, document management, and contact management.Document Viewer Agent is one of the document viewers. A...