Iceni Argus PDF Font-Encoding GlyphMap Adjustment Code Execution Vulnerability

Summary An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicitly trust an index within the specific font object and use it to write the font’s name to a single object within an array of objects. Due to ...

PT-2017-9653 · Iceni · Iceni Argus

Name of the Vulnerable Software and Affected Versions: Iceni Argus affected versions not specified Description: An exploitable heap-based buffer overflow exists when the software attempts to convert a malformed PDF with an object encoded with multiple encoding types terminating with an LZW encode...

Iceni Argus PDF Uninitialized WordStyle Color Length Code Execution Vulnerability

Summary An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF to XML a stack variable will be left uninitialized which will later be used to fetch a length that is used in a copy operatio...

Iceni Argus TrueType Font File Cmap Table Code Execution Vulnerability

Summary An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the tool will attempt to use a size out of the font to search through a linked list of buffers to return. Due to a signedness issue, a buffer smaller than...

Iceni Argus PDF TextToPolys Rasterization Code Execution Vulnerability

Summary An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will attempt to convert each character from a font into a polygon and then attempt to rasterize these shapes. When rasterizing these shapes, the tool will perfor...

PT-2017-9652 · Iceni · Iceni Argus

Name of the Vulnerable Software and Affected Versions: Iceni Argus affected versions not specified Description: An exploitable heap-based buffer overflow exists in the software. When it attempts to convert a PDF containing a malformed font to XML, the tool will attempt to use a size out of the fo...

Iceni Argus PDF Inflate+LZW Decompression Heap-Based Buffer Overflow Vulnerability

Summary An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF with an object encoded w/ multiple encoding types terminating with an LZW encoded type, an overflow may occur due to a lack of bounds checking by the LZW decoder. This can lead to...

Bejtlich Books Explained

A reader asked me to explain the differences between two of my books. I decided to write a public response. If you visit the TaoSecurity Books page, you will see two different types of books. The first type involves books which list me as author or co-author. The second involves books to which I...

classifieds.argusleader.com XSS vulnerability

Vulnerable URL: http://classifieds.argusleader.com/category.php?ft=OPENBUGBOUNTY" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

login.argusleader.com XSS vulnerability

Vulnerable URL: https://login.argusleader.com/PSIF-GUP/authenticate/?cancel-url=...

Iceni Argus 'ipNameAdd()' function remote stack buffer overflow vulnerability

Iceni Technology Argus is a PDF conversion tool. A security vulnerability exists in the Iceni Argus 'ipNameAdd' function. An attacker could exploit this vulnerability to execute arbitrary code in the context of an affected application, which could also result in a denial of service...

Iceni Argus Remote Stack Buffer Overflow Vulnerability

Iceni Technology Argus is a PDF conversion tool. A stack buffer overflow vulnerability exists in the 'ipfSetColourStroke' function of Iceni Argus, which can be exploited by an attacker to execute arbitrary code in the context of an affected application, and may also result in a denial of service...

CVE-2016-8335

An exploitable stack based buffer overflow vulnerability exists in the ipNameAdd functionality of Iceni Argus Version 6.6.04 Sep 7 2012 NK - Linux x64 and Version 6.6.04 Nov 14 2014 NK - Windows x64. A specially crafted pdf file can cause a buffer overflow resulting in arbitrary code execution. A...

CVE-2016-8333

An exploitable stack-based buffer overflow vulnerability exists in the ipfSetColourStroke functionality of Iceni Argus version 6.6.04 A specially crafted pdf file can cause a buffer overflow resulting in arbitrary code execution. An attacker can provide a malicious pdf file to trigger this...

CVE-2016-8333

An exploitable stack-based buffer overflow vulnerability exists in the ipfSetColourStroke functionality of Iceni Argus version 6.6.04 A specially crafted pdf file can cause a buffer overflow resulting in arbitrary code execution. An attacker can provide a malicious pdf file to trigger this...

CVE-2016-8333

An exploitable stack-based buffer overflow vulnerability exists in the ipfSetColourStroke functionality of Iceni Argus version 6.6.04 A specially crafted pdf file can cause a buffer overflow resulting in arbitrary code execution. An attacker can provide a malicious pdf file to trigger this...

CVE-2016-8335

An exploitable stack based buffer overflow vulnerability exists in the ipNameAdd functionality of Iceni Argus Version 6.6.04 Sep 7 2012 NK - Linux x64 and Version 6.6.04 Nov 14 2014 NK - Windows x64. A specially crafted pdf file can cause a buffer overflow resulting in arbitrary code execution. A...

Stack overflow

An exploitable stack based buffer overflow vulnerability exists in the ipNameAdd functionality of Iceni Argus Version 6.6.04 Sep 7 2012 NK - Linux x64 and Version 6.6.04 Nov 14 2014 NK - Windows x64. A specially crafted pdf file can cause a buffer overflow resulting in arbitrary code execution. A...

Stack overflow

An exploitable stack-based buffer overflow vulnerability exists in the ipfSetColourStroke functionality of Iceni Argus version 6.6.04 A specially crafted pdf file can cause a buffer overflow resulting in arbitrary code execution. An attacker can provide a malicious pdf file to trigger this...

CVE-2016-8333

Summary (CVE-2016-8333): Iceni Argus 6.6.04 contains a stack-based buffer overflow in ipfSetColourStroke. The function copies ICNChain->len elements from the opStack into a local dstArray[9], but ICNChain->len can be 12, causing a overflow and potentially arbitrary code execution. The overf...