The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to execute arbitrary code.

The vulnerability of programs for viewing and editing PDF files in Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute...

Foxit Reader Annotations lock Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Annotation object's...

Foxit Reader Annotations style Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Annotation object's...

CVE-2017-3047

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in the JavaScript engine's annotation-related API. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3024

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability when manipulating PDF annotations. Successful exploitation could lead to arbitrary code execution...

SUSE-SU-2017:0346-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: Oracle Critical Patch Update of January 2017 bsc1020905 Upgrade to version jdk8u121 icedtea 3.3.0: - S8138725: Add options for Javadoc generation - S8140353: Improve signature checking - S8151934, CVE-2017-3231: Resolve class resolution...

CVE-2016-6652

SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 Gosling SR6 and 1.10.x before 1.10.4 Hopper SR4, when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands via a sort instance with a function call...

Fedora 24 : php-symfony (2016-224edc14dd)

Version 2.7.13 2016-05-09 - security 18733 limited the maximum length of a submitted username fabpot - bug 18730 FrameworkBundle prevent calling get for servicecontainer service xabbuh - bug 18709 DependencyInjection top-level anonymous services must be public xabbuh - bug 18692 add Event...

Fedora 23 : php-symfony (2016-f36247d441)

Version 2.7.13 2016-05-09 - security 18733 limited the maximum length of a submitted username fabpot - bug 18730 FrameworkBundle prevent calling get for servicecontainer service xabbuh - bug 18709 DependencyInjection top-level anonymous services must be public xabbuh - bug 18692 add Event...

Fedora 22 : php-symfony (2016-4ad874e6c2)

Version 2.7.13 2016-05-09 - security 18733 limited the maximum length of a submitted username fabpot - bug 18730 FrameworkBundle prevent calling get for servicecontainer service xabbuh - bug 18709 DependencyInjection top-level anonymous services must be public xabbuh - bug 18692 add Event...

Adobe Reader DC Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

The vulnerability of the Autodesk Design Review software for applying electronic annotations allows a hacker to execute arbitrary code.

The vulnerability of the Autodesk Design Review software for applying electronic annotations is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely, using a specially crafted value of biClrUsed in the BMP file, which causes th...

Memory corruption

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted...

CVE-2016-0931

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted...

PT-2016-1113 · Ibm +1 · Ibm Tivoli Common Reporting +7

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions affected versions not specified IBM Tivoli Common Reporting versions affected versions not specified IBM Sterling B2B Integrator versions affected versions not specified IBM Sterling Integrator versio...

Mail.ru: [otus.p.mail.ru] Full Path Disclosure

Не факт, что вам удастся это исправить, так как проблема в стороннем ПО - "brat rapid annotation tool" Который доступен по ссылке otus.p.mail.ru/brat Стоит немного погулять по директориям и увидим раскрытие путей: Could not write statistics cache file to directory...

chromium-browser: use-after-free in PDFium

Use-after-free vulnerability in the CPDFSDKPageView implementation in fpdfsdk/src/fsdkmgr.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact by leveraging mishandling of...

CVE-2015-6756

Use-after-free vulnerability in the CPDFSDKPageView implementation in fpdfsdk/src/fsdkmgr.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact by leveraging mishandling of...

CVE-2015-6756

Use-after-free vulnerability in the CPDFSDKPageView implementation in fpdfsdk/src/fsdkmgr.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact by leveraging mishandling of...

UBUNTU-CVE-2015-6756

Use-after-free vulnerability in the CPDFSDKPageView implementation in fpdfsdk/src/fsdkmgr.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact by leveraging mishandling of...