47 matches found
EUVD-2011-0628
Malware in sbrugna...
CVE-2021-36004
Adobe InDesign version 16.0 and earlier is affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user...
Adobe Reader 11.0.10 CoolType Out-Of-Bounds Read
Adobe Reader version 11.0.10 proof of concept exploit that demonstrates an out-of-bounds read found in 2015. ============================================================================================================================================= | Title : Adobe Reader 11.0.10 CoolType...
Adobe Reader CoolType Out-Of-Bounds Read
The Type1/CFF CharString interpreter code in the Adobe Reader CoolType.dll font library does not check if the input stream pointer has not gone beyond the end of the source buffer, which stores the state machine instructions. The Type1/CFF CharString interpreter code in the Adobe Reader...
The vulnerability of the CoolType font processing framework in Acrobat Reader software, which is used for viewing and editing PDF files, allows a perpetrator to disclose protected information.
The vulnerability of the CoolType font processing framework in Acrobat Reader software, which is used for reading and editing PDF files, involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a...
PT-2024-8095 · Adobe · Acrobat Reader
Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier Description: The issue is related to an out-of-bounds read vulnerability in the CoolType font processing framework of Acrobat Reader. This vulnerabilit...
Adobe Acrobat Reader Font gvar TupleVariation Data Out-Of-Bounds Read Vulnerability
Talos Vulnerability Report TALOS-2024-2002 Adobe Acrobat Reader Font gvar TupleVariation Data Out-Of-Bounds Read Vulnerability August 13, 2024 CVE Number CVE-2024-41832 SUMMARY An out-of-bounds read vulnerability exists in CoolType, a font processing framework used by Adobe Acrobat Reader...
Adobe Acrobat Reader Font Packed Point Numbers Out-Of-Bounds Read Vulnerability
Talos Vulnerability Report TALOS-2024-2003 Adobe Acrobat Reader Font Packed Point Numbers Out-Of-Bounds Read Vulnerability August 13, 2024 CVE Number CVE-2024-41835 SUMMARY An out-of-bounds read vulnerability exists in CoolType, a font processing framework used by Adobe Acrobat Reader...
SUSE CVE-2010-2862
Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows remote attackers to execute arbitrary code via a TrueType font with a large maxCompositePoints value in a Maximum Profile maxp table...
SUSE CVE-2011-2441
Multiple stack-based buffer overflows in CoolType.dll in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors...
CVE-2021-21086
Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution...
CVE-2021-21086
Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution...
Cross site scripting
Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution...
CVE-2021-21086 Adobe Reader CoolType Arbitrary Stack Manipulation
Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution...
CVE-2021-21086
CVE-2021-21086 affects Adobe Acrobat Reader DC and related versions (e.g., 2020.013.20074 and earlier; 2020.001.30018 and earlier; 2017.011.30188 and earlier) with an Out-of-bounds Write vulnerability in the CoolType library. The issue allows arbitrary code execution in the context of the current...
Adobe InDesign buffer overflow vulnerability
Adobe InDesign is a set of typesetting and editing applications from Adobe, Inc. A buffer overflow vulnerability exists in Adobe InDesign, which stems from the fact that Adobe InDesign 16.0 and earlier versions is affected by an "out-of-bounds write" vulnerability in the CoolType library. "...
CVE-2021-36004
Adobe InDesign version 16.0 and earlier is affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user...
CVE-2021-36004
Adobe InDesign version 16.0 and earlier is affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user...
Cross site scripting
Adobe InDesign version 16.0 and earlier is affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user...
Adobe InDesign 缓冲区错误漏洞
Adobe InDesign is a set of typesetting and editing applications from Adobe, Inc. A buffer overflow vulnerability exists in Adobe InDesign, which stems from the fact that Adobe InDesign 16.0 and earlier versions is affected by an "out-of-bounds write" vulnerability in the CoolType library. "...