Heap overflow

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4895...

CVE-2012-4895: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4896...

CVE-2012-4363

Multiple unspecified vulnerabilities in Adobe Reader through 10.1.4 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document, related to "sixteen more crashes affecting Windows, OS X, or both systems."...

Investintech Products Denial of Service Vulnerabilities

Investintech products are prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-4216

Investintech.com SlimPDF Reader does not properly restrict write operations, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document...

CVE-2011-4217

Investintech.com SlimPDF Reader does not properly restrict read operations during block data moves, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document...

CVE-2011-4220

Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document...

CVE-2011-4216

CVE-2011-4216 affects Investintech SlimPDF Reader. The vulnerability stems from improper restriction of write operations in the PDF handling component, allowing remote attackers to cause a crash or possibly execute arbitrary code via a crafted PDF. The issue is confirmed in multiple security feed...

CVE-2011-4220

Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document...

CVE-2011-4219

Investintech.com SlimPDF Reader does not prevent faulting-address data from affecting branch selection, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document...

CVE-2011-4223

Technical details for CVE-2011-4223 are not publicly available in the provided documents; monitor for updates.

CVE-2011-4218

Investintech.com SlimPDF Reader does not prevent faulting-instruction data from affecting write operations, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document...

PT-2011-4889

Name of the Vulnerable Software and Affected Versions Investintech.com SlimPDF Reader affected versions not specified Description The issue is related to improper restriction of write operations in the SlimPDF Reader, which can be exploited by remote attackers using a crafted PDF document. This c...

CVE-2011-4218: Undefined Security Weakness

Investintech.com SlimPDF Reader does not prevent faulting-instruction data from affecting write operations, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document...

CVE-2011-4219: Undefined Security Weakness

Investintech.com SlimPDF Reader does not prevent faulting-address data from affecting branch selection, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document...

CVE-2011-4223: Undefined Security Weakness

Unspecified vulnerability in Investintech.com Absolute PDF Server allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document...

PT-2011-4891

Name of the Vulnerable Software and Affected Versions Investintech.com SlimPDF Reader affected versions not specified Description The issue allows remote attackers to cause a denial of service, potentially leading to an application crash, or possibly execute arbitrary code via a crafted PDF...

CVE-2011-4217: Undefined Security Weakness

Investintech.com SlimPDF Reader does not properly restrict read operations during block data moves, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document...

PT-2011-4896

Name of the Vulnerable Software and Affected Versions Absolute PDF Server affected versions not specified Description The issue allows remote attackers to cause a denial of service, potentially leading to an application crash, or possibly execute arbitrary code. This can be achieved by sending a...

CVE-2011-1554

Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service application crash via a PDF document containing a crafted Type 1 font that triggers an invalid memory read, integer overflow, and invalid...