CVE-2016-6265

Use-after-free vulnerability in the pdfloadxref function in pdf/pdf-xref.c in MuPDF allows remote attackers to cause a denial of service crash via a crafted PDF file...

MS16-115: Security update for Microsoft Windows PDF Library: September 13, 2016

Resolves vulnerabilities in Windows that could allow information disclosure if a user views specially crafted PDF content online or opens a specially crafted PDF document.SummaryThis security update resolves vulnerabilities in Microsoft Windows. The vulnerability could allow information disclosur...

chromium-browser: use after free in pdfium

PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted PDF document, related to...

CVE-2016-5151

PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted PDF document, related to...

UBUNTU-CVE-2016-5151

PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted PDF document, related to...

CVE-2016-5151

PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted PDF document, related to...

CVE-2016-5151

Removed by vendor...

CVE-2016-5151

PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted PDF document, related to...

Apple OS X Preview Remote Code Execution Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers. A security vulnerability exists in Apple Mac OS X EI Capitan version 10.11.6 Preview, which can be triggered by a heap overflow Out-Of-Bounds Write vulnerability when opening a carefully constructed PDF file, which...

Foxit Reader and PhantomPDF Remote Code Execution Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. Foxit Reader and PhantomPDF 8.0.0.624 and earlier versions have a security vulnerability that can be triggered when opening a carefully...

Foxit Reader and PhantomPDF Remote Code Execution Vulnerability (CNVD-2016-06998)

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. A security vulnerability exists in Foxit Reader and PhantomPDF 8.0.0.624 and earlier versions, which can be triggered by a heap memory...

CVE-2016-3319

The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allows remote attackers to execute arbitrary code via a crafted PDF file, aka "Microsoft PDF Remote Code Execution Vulnerability."...

MS16-102: Security Update for Microsoft Windows PDF Library (3182248)

The remote Windows host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in the Microsoft Windows PDF Library due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this vulnerability by convincing a user to...

Adobe Acrobat and Reader Memory Corruption (APSB16-15: CVE-2016-4255)

A remote code execution vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to a use-after-free error in Adobe Acrobat and Reader while handling a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially...

Adobe Acrobat and Reader Memory Corruption (APSB16-26 : CVE-2016-4205)

A memory corruption vulnerability exists in Adobe Reader. In particular, the vulnerability is trigger by a crafted PDF file which causes an out of bounds memory access, which can trigger an access violation. Attackers can exploit the vulnerability by using the out of bounds access for unintended...

Adobe Reader Memory Corruption (APSB16-26: CVE-2016-4251)

This vulnerability is an instance of a memory corruption vulnerability. In particular, the vulnerability is caused by a crafted PDF file which causes an out of bounds memory access, which can trigger an access violation exception. Attackers can exploit the vulnerability by enticing a victim to op...

Updated pdfbox packages fix security vulnerability

Apache PDFBox before 1.8.12 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted PDF CVE-2016-2175...

Adobe Acrobat Reader DC Remote Code Execution Vulnerability (CNVD-2016-04920)

Adobe Reader is PDF document reading software. A security vulnerability exists in Adobe Reader DC that allows an attacker to trigger a memory corruption vulnerability in Adobe Reader DC by means of a carefully constructed PDF file, which can be exploited to execute arbitrary code in the context o...

Adobe Acrobat Reader DC Remote Code Execution Vulnerability (CNVD-2016-04914)

Adobe Reader is PDF document reading software. A security vulnerability exists in Adobe Reader DC that allows an attacker to trigger a memory corruption vulnerability in Adobe Reader DC via a carefully constructed PDF file, which can be exploited to execute arbitrary code in the context of the...

Adobe Acrobat Reader DC Remote Code Execution Vulnerability (CNVD-2016-04921)

Adobe Reader is PDF document reading software. A security vulnerability exists in Adobe Reader DC that allows an attacker to trigger a memory corruption vulnerability in Adobe Reader DC by means of a carefully constructed PDF file, which can be exploited to execute arbitrary code in the context o...