67 matches found
JVN#75742861: Improper restriction of XML external entity references (XXE) in National land numerical information data conversion tool
National land numerical information data conversion tool provided by MLIT improperly restricts XML external entity references XXE CWE-611. Impact By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker. Solution Stop using the product The developer...
Adobe Acrobat and Adobe Acrobat Reader Buffer Overflow Vulnerability
Adobe Acrobat and Adobe Acrobat Reader are both products of the United States Ordoby Adobe.Adobe Acrobat is a set of PDF file editing and conversion tools.Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDF. Adobe Acrobat and Adobe Reader has a buffer overfl...
The vulnerability of the bezier_spline function in the genepic.c utility for converting .fig files (Fig2dev), which allows a hacker to cause a service failure.
The vulnerability of the bezierspline function in the genepic.c utility for converting .fig files in Fig2dev is related to writing outside the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
Adobe Acrobat and Reader Resource Management Error Vulnerability
Adobe Acrobat, a PDF file editing and conversion tool from Adobe, is vulnerable to a resource management error in Adobe Acrobat and Reader, which is caused by a post-release usage error when processing PDF files. A remote attacker could exploit the vulnerability to create a specially crafted PDF...
[SECURITY] Fedora 34 Update: converseen-0.9.9.2-2.fc34
Converseen is a batch image conversion tool and resizer written in C++ with Q t5 and Magick++. Converseen allows you to convert images in more than 100 different formats!...
The vulnerability of the PointerHolder function in the command-line PDF conversion tool QPDF allows a malicious actor to cause a service failure.
The vulnerability of the PointerHolder function in the command-line PDF conversion tool QPDF is related to the infinite execution of a loop. Exploiting this vulnerability could allow an attacker to cause service interruptions...
The vulnerability of the libqpdf.a component, a command-line utility for converting PDF documents into QPDF format, allows an attacker to cause a service failure.
The vulnerability of the libqpdf.a component of the command-line utility for converting PDF documents, QPDF, is related to the infinite execution of a loop. Exploiting this vulnerability could allow an attacker to cause service interruptions...
The vulnerability of the QPDFTokenizer::resolveLiteral function in the command-line utility for converting QPDF documents allows a attacker to cause a service failure.
The vulnerability of the QPDFTokenizer::resolveLiteral function in the command-line PDF conversion utility for QPDF documents involves infinite loop execution. Exploiting this vulnerability could allow an attacker to cause service interruptions...
Jiajia MP4 MP3 Format Converter is vulnerable to dll hijacking.
Jia Jia MP4 MP3 Format Converter is a MP4, MP3 format conversion tool. Jiajia MP4 MP3 Format Converter suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...
EV Video Converter Win has dll hijacking vulnerability
EV Video Converter is a video conversion tool. EV Video Converter Win suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...
new package: virt-p2v
An update is available for virt-p2v. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Virt-p2v is a tool for conversion of a physical server to a virtual guest...
Iceni Argus TrueType Font File Cmap Table Code Execution Vulnerability(CVE-2016-8386)
Summary An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the tool will attempt to use a size out of the font to search through a linked list of buffers to return. Due to a signedness issue, a buffer smaller than...
DEBIAN-CVE-2014-8127
LibTIFF 4.0.3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted TIFF image to the 1 checkInkNamesString function in tifdir.c in the thumbnail tool, 2 compresscontig function in tiff2bw.c in the tiff2bw tool, 3 putcontig8bitCIELab function in...
The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat allow attackers to execute arbitrary code.
The vulnerability of the image conversion tool for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat, arises due to an operation going beyond the buffer in memory, resulting in transformations of TIFF files. Exploitin...
The vulnerability of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat allows a perpetrator to execute arbitrary code.
The vulnerability of the image conversion tool for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat, arises due to an operation going beyond the buffer in memory, resulting in transformations of TIFF files. Exploitin...
Netpbm Local Denial of Service Vulnerability (CNVD-2017-03589)
netpbm is a tool for graphics conversion. Netpbm suffers from a local denial of service vulnerability. An attacker can exploit this vulnerability to cause the affected application to crash, resulting in a denial of service...
Iceni Argus Memory Corruption Vulnerability
Iceni Argus is the British Iceni company's set of PDF document type conversion tool. Iceni Argus processing special PDF files have a security vulnerability, allowing attackers can exploit the vulnerability to build malicious PDF files, inducing the user to parse, can make the application crash...
Iceni Argus TrueType Font File Cmap Table Code Execution Vulnerability
Summary An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the tool will attempt to use a size out of the font to search through a linked list of buffers to return. Due to a signedness issue, a buffer smaller than...
Iceni Argus 'ipNameAdd()' function remote stack buffer overflow vulnerability
Iceni Technology Argus is a PDF conversion tool. A security vulnerability exists in the Iceni Argus 'ipNameAdd' function. An attacker could exploit this vulnerability to execute arbitrary code in the context of an affected application, which could also result in a denial of service...
Moderate: Red Hat Security Advisory: libguestfs and virt-p2v security, bug fix, and enhancement update
An update for libguestfs and virt-p2v is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...