Lucene search
+L

240 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/02/23 12:0 a.m.33 views

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6.3AI score0.00393EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/02/23 12:0 a.m.17 views

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6.3AI score0.00393EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/17 12:0 a.m.20 views

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00327EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/04/22 12:0 a.m.12 views

The vulnerability of the PostScript Printer Driver (Pscript) and PCL6 Class Printer drivers for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the PostScript Printer Driver Pscript and PCL6 Class Printer operating systems on Windows is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created XPS file...

9CVSS8.2AI score0.01634EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/04/11 12:0 a.m.6 views

PT-2023-2407 · Microsoft · Postscript/Pcl6 Class Printer Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft PostScript and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to insufficient input validation in the PostScript Printer Driver Pscript and PCL6 Class Printer drivers for Windows operatin...

9CVSS9.6AI score0.01634EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
added 2023/02/15 4:39 a.m.4 views

SUSE CVE-2017-14685

Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016aa61" on Windows. This occurs because xpsloadlinksinglyphs in...

7.8CVSS8AI score0.01324EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:39 a.m.4 views

SUSE CVE-2017-14687

Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016cb4f" on Windows. This occurs because of mishandling of XML tag name...

7.8CVSS8AI score0.01324EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:39 a.m.7 views

SUSE CVE-2017-14686

Artifex MuPDF 1.11 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d" on Windows. This occurs because readzipdirimp in fitz/unzip.c does not check...

7.8CVSS7.8AI score0.0186EPSS
SaveExploits1References5
OSV
OSV
added 2023/01/26 6:59 p.m.7 views

CVE-2022-42395

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.2AI score0.00386EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/01/26 12:0 a.m.6 views

CVE-2022-42396

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.1AI score0.00364EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/01/26 12:0 a.m.10 views

CVE-2022-42395

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.2AI score0.00386EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2022/12/13 8:0 a.m.897 views

December 13, 2022-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 (KB5021093)

December 13, 2022-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 KB5021093 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1...

7.8CVSS8AI score0.0113EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2022/12/13 8:0 a.m.138 views

December 13, 2022-KB5021087 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H1

None None...

7.8CVSS7.6AI score0.0113EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2022/10/07 12:0 a.m.28 views

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.8AI score0.00357EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.11 views

Mageia: Security Advisory (MGASA-2014-0041)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References5
Check Point Advisories
Check Point Advisories
added 2020/10/25 12:0 a.m.48 views

Microsoft .NET Framework XPS File Parsing Remote Code Execution (CVE-2020-0605)

A remote code execution vulnerability exists in Microsoft .NET Framework XPS File Parsing. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9.3CVSS7AI score0.17767EPSS
SaveExploits0
Mageia
Mageia
added 2020/08/25 8:13 a.m.40 views

Updated ghostscript packages fix security vulnerabilities

The updated packages fix security vulnerabilities: A buffer overflow vulnerability in lprnisblack in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. CVE-2020-16287 A buffer overflow vulnerability in...

7.8CVSS4.2AI score0.02258EPSS
SaveExploits25References2
BDU FSTEC
BDU FSTEC
added 2018/10/26 12:0 a.m.9 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer limit in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created XPS file...

10CVSS7.8AI score0.05568EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2018/07/16 12:0 a.m.21 views

Adobe Acrobat Pro DC ImageConversion XPS Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

6.8CVSS5.5AI score0.13672EPSS
SaveExploits0References1
OSV
OSV
added 2018/02/27 5:29 a.m.2 views

CVE-2018-4904

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability. The vulnerability is triggered by crafted TIFF data within an XPS file...

8.8CVSS6AI score0.43418EPSS
SaveExploits0References4
Rows per page
Query Builder