3185 matches found
CVE-2014-7902
Use-after-free vulnerability in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...
Design/Logic Flaw
Use-after-free vulnerability in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...
CVE-2014-7900
Use-after-free vulnerability in the CPDFParser::IsLinearizedFile function in fpdfapi/fpdfparser/fpdfparserparser.cpp in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...
UBUNTU-CVE-2014-7900
Use-after-free vulnerability in the CPDFParser::IsLinearizedFile function in fpdfapi/fpdfparser/fpdfparserparser.cpp in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...
CVE-2014-7902
Removed by vendor...
CVE-2014-7902
CVE-2014-7902 is a use-after-free in PDFium used by Google Chrome prior to 39.0.2171.65, exploitable via a crafted PDF to cause a denial of service (and possibly unspecified other impact). OpenSUSE/SUSE advisories indicate upgrading Chrome to 39.0.2171.65 fixes this along with other CVEs (e.g., 7...
CoreGraphics Information Disclosure - CVE-2014-4378
This article explores the exploitability of MobileSafari on IOS 7.1.x. Using a crafted PDF file as an HTML image makes it possible to leak information about the memory layout to the browser Javascript interpreter. Apple CoreGraphics library fails to validate input when parsing the colorspace...
Integer overflow
Integer overflow in CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF document...
CVE-2014-4378
CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to obtain sensitive information or cause a denial of service out-of-bounds read and application crash via a crafted PDF document...
CVE-2014-4377
CVE-2014-4377 affects Apple iOS prior to 8 and Apple TV prior to 7. It is a CoreGraphics memory corruption in PDF handling: specifically an integer overflow in the Indexed color space processing of PDFs that can trigger a heap overflow via a controlled allocation path (x_calloc) and a follow-on m...
CVE-2014-4377
Integer overflow in CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF document...
Adobe Reader 3DIF Plugin Heap Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the 3DIF Plugin...
CVE-2010-5110
The CVE-2010-5110 entry applies to Poppler’s DCTStream.cc, vulnerable in versions before 0.13.3. The provided documents state that a crafted PDF file can cause a denial of service (crash) via this component. No explicit exploitation details or affected product versions beyond “before 0.13.3” are ...
CVE-2010-5110
DCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service crash via a crafted PDF file...
CVE-2010-5110
DCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service crash via a crafted PDF file...
Adobe Reader for Android exposes insecure Javascript interfaces
------------------------------------------------------------------------ Adobe Reader for Android exposes insecure Javascript interfaces ------------------------------------------------------------------------ Yorick Koster, April 2014...
CVE-2014-0514
The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via a crafted PDF document, a related issue to CVE-2012-6636...
CVE-2013-6474
CVE-2013-6474 is a heap-based buffer overflow in the pdftoopvp filter within CUPS/cups-filters that allows remote code execution via a crafted PDF. Affected: cups-filters (and CUPS components) prior to version 1.0.47. Impact: arbitrary code execution with lp user privileges as described in the CV...
