Heap overflow

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability in the image conversion engine, when handling JPEG data embedded within...

CVE-2018-4890

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability in the image conversion engine, when handling JPEG data embedded within...

Design/Logic Flaw

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability. The vulnerability is triggered by crafted TIFF data within an XPS file...

CVE-2018-4890

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability in the image conversion engine, when handling JPEG data embedded within...

CVE-2018-4904

CVE-2018-4904 is a heap overflow in Adobe Acrobat Reader triggered by crafted TIFF data within an XPS file, affecting versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier; attacker could cause out-of-bounds memory access and potentially execute arbitrary...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16418)

A out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an out of range pointer offset that is used to access internal data structure. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted XML/XPS file...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16382)

An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to improper validation of embedded TIFF images in a XPS file. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted webpage or a maliciously crafted XPS...

Denial Of Service (DoS)

MuPDF is vulnerable to denial of service DoS attacks and possibly other attacks. This vulnerability is possible because the xpsloadlinksinglyphs function doesn't verify if a font can be loaded before trying to load it. This can be triggered using a .xps file...

Denial Of Service (DoS)

MuPDF is vulnerable to denial of service DoS attacks and possibly other attacks. These attacks can be performed because the readzipdirimp function does not check if the size fields in a ZIP entry are negative. It can be triggered using a .xps file...

[ASA-201711-3] mupdf-tools: arbitrary code execution

Arch Linux Security Advisory ASA-201711-3 ========================================= Severity: High Date : 2017-11-01 CVE-ID : CVE-2017-14685 CVE-2017-14686 CVE-2017-14687 CVE-2017-15587 Package : mupdf-tools Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-458...

Foxit Reader Buffer Overflow Vulnerability (CNVD-2017-36066)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A buffer overflow vulnerability exists in Foxit Reader version 8.3.2.25013. A remote attacker can exploit this vulnerability with a specially crafted .xps file to cause a denial of service or execute arbitrary code...

Debian DSA-4006-1 : mupdf - security update

Multiple vulnerabilities have been found in MuPDF, a PDF file viewer, which may result in denial of service or the execution of arbitrary code. - CVE-2017-14685, CVE-2017-14686, and CVE-2017-14687 WangLin discovered that a crafted .xps file can crash MuPDF and potentially execute arbitrary code i...

CVE-2017-14947

Artifex GSView 6.0 Beta on Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Block Data Move starting at mupdfnet64!mIncrementalSaveFile+0x0000000000193359."...

CVE-2017-14947

Artifex GSView 6.0 Beta on Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Block Data Move starting at mupdfnet64!mIncrementalSaveFile+0x0000000000193359."...

Design/Logic Flaw

Artifex GSView 6.0 Beta on Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Block Data Move starting at mupdfnet64!mIncrementalSaveFile+0x0000000000193359."...

CVE-2017-14947

CVE-2017-14947 affects Artifex GSView 6.0 Beta on Windows, where processing of crafted .xps files can lead to arbitrary code execution or a denial of service. The root cause is described as a Read Access Violation on Block Data Move starting at mupdfnet64!mIncrementalSaveFile+0x0000000000193359, ...

CVE-2017-14947

Artifex GSView 6.0 Beta on Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Block Data Move starting at mupdfnet64!mIncrementalSaveFile+0x0000000000193359."...

Artifex MuPDF Denial of Service Vulnerability (CNVD-2017-35030)

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A security vulnerability exists in Artifex MuPDF version 1.11. The vulnerability can be exploited to execute arbitrary code or cause a denial of service with the help of a specially crafted .xps file...

Artifex MuPDF Denial of Service Vulnerability (CNVD-2017-35029)

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A security vulnerability exists in Artifex MuPDF version 1.11. The vulnerability can be exploited by an attacker to cause a denial of service with the help of a specially crafted .xps file...

CVE-2017-14686

Artifex MuPDF 1.11 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d" on Windows. This occurs because readzipdirimp in fitz/unzip.c does not check...