CVE-2018-14395

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted audio file when converting to the MOV audio format...

JavaScript Core - Arbitrary Code Execution Exploit

Exploit for multiple platform in category local exploits // Load Int library, thanks saelo! load'util.js'; load'int64.js'; // Helpers to convert from float to in a few random places var conva = new ArrayBuffer8; var convf = new Float64Arrayconva; var convi = new Uint32Arrayconva; var convi8 = new...

Adobe Acrobat Pro DC ImageConversion EMF EMR_ALPHABLEND Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Antenna House Office Server Document Converter for Linux64 vbputanld Code Execution Vulnerability

Antenna House Office Server Document Converter for Linux64 is a document format converter based on Linux64 platform from Antenna House, which is mainly used to convert Word, Excel and PowerPoint files to PDF, SVG and JPEG files, etc. It is mainly used to convert Word, Excel and PowerPoint files t...

Adobe Acrobat Pro DC ImageConversion EMF Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-3929

An exploitable heap corruption exists in the PowerPoint document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312. A crafted PowerPoint PPT document can lead to heap corruption, resulting in remote code execution...

CVE-2018-3933

An exploitable out-of-bounds write exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312. A crafted Microsoft Word DOC document can lead to an out-of-bounds write, resulting in remote cod...

CVE-2018-3929

An exploitable heap corruption exists in the PowerPoint document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312. A crafted PowerPoint PPT document can lead to heap corruption, resulting in remote code execution...

Heap overflow

An exploitable heap corruption exists in the PowerPoint document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312. A crafted PowerPoint PPT document can lead to heap corruption, resulting in remote code execution...

CVE-2018-3929

The CVE-2018-3929 entry concerns Antenna House Office Server Document Converter on Linux64, version 6.1 Pro MR2. A vulnerability in the PowerPoint (.ppt) document conversion path can cause heap corruption, enabling remote code execution when processing a specially crafted PPT file. The issue is t...

CVE-2018-3929: Out-of-bounds Write

An exploitable heap corruption exists in the PowerPoint document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312. A crafted PowerPoint PPT document can lead to heap corruption, resulting in remote code execution...

JavaScript Core - Arbitrary Code Execution

JavaScript Core - Arbitrary Code Execution // Load Int library, thanks saelo! load'util.js'; load'int64.js'; // Helpers to convert from float to in a few random places var conva = new ArrayBuffer8; var convf = new Float64Arrayconva; var convi = new Uint32Arrayconva; var convi8 = new...

PT-2018-16321 · Antenna House · Antenna House Office Server Document Converter

Name of the Vulnerable Software and Affected Versions: Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312 Description: A heap corruption issue exists in the PowerPoint document conversion functionality. This can be exploited by a crafted PowerPoint...

CVE-2018-3932: Out-of-bounds Write

An exploitable stack-based buffer overflow exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312. A crafted Microsoft Word DOC document can lead to a stack-based buffer overflow, resultin...

PT-2018-16324

Name of the Vulnerable Software and Affected Versions Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312 Description A stack-based buffer overflow exists in the Microsoft Word document conversion functionality. This can be exploited by a crafted Microsof...

PT-2018-16325

Name of the Vulnerable Software and Affected Versions Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312 Description An out-of-bounds write issue exists in the Microsoft Word document conversion functionality. A crafted Microsoft Word document can cause...

PT-2018-2694

Name of the Vulnerable Software and Affected Versions Tianocore affected versions not specified Description The issue is related to errors in data type conversion in the UEFI interface implementation. It may allow an attacker to disable System Management Mode SMM protection. Recommendations At th...

PT-2018-16727

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2018.011.20040 and earlier Adobe Acrobat and Reader versions 2017.011.30080 and earlier Adobe Acrobat and Reader versions 2015.006.30418 and earlier Description The issue is related to an out-of-bounds read,...

Antenna House Office Server Document Converter putShapeProperty Code Execution Vulnerability

Summary An exploitable out-of-bounds write exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312. A crafted Microsoft Word DOC document can lead to an out-of-bounds write, resulting in...

CVE-2018-13300

In FFmpeg 3.2 and 4.0.1, an improper argument AVCodecParameters passed to the avprivrequestsample function in the handleeac3 function in libavformat/movenc.c may trigger an out-of-array read while converting a crafted AVI file to MPEG4, leading to a denial of service and possibly an information...