CVE-2015-8868

Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service memory corruption and crash or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF...

Foxit Reader Arbitrary Code Execution Vulnerability

Foxit Reader is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Foxit PhantomPDF Arbitrary Code Execution Vulnerability

Foxit PhantomPDF is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-8580

Multiple use-after-free vulnerabilities in the 1 Print method and 2 App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7.2.2 allow remote attackers to execute arbitrary code via a crafted PDF document...

Design/Logic Flaw

Multiple use-after-free vulnerabilities in the 1 Print method and 2 App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7.2.2 allow remote attackers to execute arbitrary code via a crafted PDF document...

CVE-2015-8580

Multiple use-after-free vulnerabilities in the 1 Print method and 2 App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7.2.2 allow remote attackers to execute arbitrary code via a crafted PDF document...

Google Chrome PDFium Security Restriction Bypass Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. Google Chrome 47.0.2526.73 previous versions of PDFium used in a security vulnerability. Because the program fails to properly restrict the use of chrome: URL...

CVE-2015-6779

PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remote attackers to bypass intended scheme restrictions via a crafted PDF document, as demonstrated by a document with a link to a chrome://settings URL...

UBUNTU-CVE-2015-6779

PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remote attackers to bypass intended scheme restrictions via a crafted PDF document, as demonstrated by a document with a link to a chrome://settings URL...

UBUNTU-CVE-2015-6778

The CJBig2SymbolDict class in fxcodec/jbig2/JBig2SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via a PDF document containing crafted data with JBIG2...

CVE-2015-6778

The CJBig2SymbolDict class in fxcodec/jbig2/JBig2SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via a PDF document containing crafted data with JBIG2...

CVE-2015-6779

CVE-2015-6779 : In PDFium used by Google Chrome prior to 47.0.2526.73, the library fails to properly restrict chrome: URLs, allowing a crafted PDF to bypass scheme restrictions via a link to chrome://settings. This could enable remote exploitation within affected Chrome/Chromium environments. The...

chromium-browser: Scheme bypass in PDFium

PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remote attackers to bypass intended scheme restrictions via a crafted PDF document, as demonstrated by a document with a link to a chrome://settings URL...

Foxit Reader Forms Out-of-Bounds Remote Code Execution Vulnerability

Foxit Reader is a compact PDF reader. A security vulnerability exists in Foxit Reader's PDF Forms, which allows an attacker to exploit a constructed PDF file to trick the user into parsing it, reading memory outside of the allocated object, and executing arbitrary code...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the CPDFSDKPageView component of the PDFium browser’s implementation is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure using a specially crafted PDF file...

CVE-2015-6758

The CPDFDocument::GetPage function in fpdfapi/fpdfparser/fpdfparserdocument.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, does not properly perform a cast of a dictionary object, which allows remote attackers to cause a denial of service or possibly have unspecified other impact vi...

Code injection

The CPDFDocument::GetPage function in fpdfapi/fpdfparser/fpdfparserdocument.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, does not properly perform a cast of a dictionary object, which allows remote attackers to cause a denial of service or possibly have unspecified other impact vi...

CVE-2015-6758

The CVE-2015-6758 entry concerns PDFium in Google Chrome/Chromium. The issue is a bad-cast in CPDF_Document::GetPage within fpdfapi/fpdf_parser/fpdf_parser_document.cpp, exploited via a crafted PDF, enabling a denial of service and possibly other impact. Public details consistently tie this to PD...

CVE-2015-6758

Removed by vendor...

Adobe Acrobat/Reader Memory Misreference Vulnerability (CNVD-2015-06695)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory misreference vulnerability exists in Adobe Reader/Acrobat. This allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could crash the application or execute arbitrary code...