CVE-2007-5397

CVE-2007-5397 describes a heap-based buffer overflow in the activePDF Server (APServer.exe) used by activePDF Server products. Vulnerable versions include 3.8.4 and 3.8.5.14, and possibly other versions before 3.8.6.16. The flaw allows a remote attacker to execute arbitrary code by sending a craf...

activePDF Server报文处理远程堆溢出漏洞

BUGTRAQ ID: 28013 CNCAN ID:CNCAN-2008022801 activePDF Server是一款打印转换成PDF文件的应用服务程序。 activePDF Server服务处理客户端数据时存在便捷错误，远程攻击者可以利用漏洞发送小于实际数据大小的报文可导致触发堆溢出，可能以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 ActivePDF activePDF Server 3.8.5 14 ActivePDF activePDF Server 3.8.4 厂商解决方案 升级到activePDF Server 3.8.6.16版本：...

CVE-2007-5397: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the activePDF Server service aka APServer.exe in activePDF Server 3.8.4 and 3.8.5.14, and possibly other versions before 3.8.6.16, allows remote attackers to execute arbitrary code via a packet with a size field that is less than the actual size of the data...

ActivePDF Server Detection

Binary data 4403.prm...

CVE-2007-5909

Multiple stack-based buffer overflows in Autonomy formerly Verity KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, IBM Lotus Notes before 7.0.3, Symantec Mail Security, and other products, allow remote attackers to execute arbitrary code via a crafted 1 A...

CVE-2007-5910: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Autonomy formerly Verity KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes 8.0 and before 7.0.3, Symantec Mail Security, and other products, allows remote attackers to execute arbitrary code via a...

Fixed XSS vulnerability at store.activepdf.com

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting store.activepdf.com, which at the time of submission ranked 125686 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2007. It is...