1810 matches found
CVE-2015-4551
LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which embeds data from...
CVE-2015-4551
LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which embeds data from...
MS15-115: Security update for Windows to address remote code execution: November 10, 2015
Resolves vulnerabilities in Windows that could allow remote code execution if an attacker convinces a user to open a specially crafted document or to go to an untrusted webpage that contains embedded fonts.SummaryThis security update resolves vulnerabilities in Windows. The most severe of the...
OpenOffice 4.1.1 -- multiple vulnerabilities
The Apache OpenOffice Project reports: A vulnerability in OpenOffice settings of OpenDocument Format files and templates allows silent access to files that are readable from an user account, over-riding the user's default configuration settings. Once these files are imported into a...
CVE-2007-2026
The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service CPU consumption via a crafted document with a large number of line feed characters, which is not well handled by OS/2 REXX regular expressions that use wildcards, as originally reported fo...
Apple iWork Information Disclosure Vulnerability
Apple iWork is an office software suite for OS X and iOS operating systems. A security vulnerability exists in Apple iWork versions prior to 2.6, Apple Pages versions prior to 5.6, Apple Keynote versions prior to 6.6, and Apple Numbers versions prior to 3.6. A remote attacker could exploit this...
CVE-2015-7034
The Apple iWork application before 2.6 for iOS and Apple Pages before 5.6 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Pages document...
Information disclosure
The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to obtain sensitive information via a crafted document...
Memory corruption
The Apple iWork application before 2.6 for iOS and Apple Pages before 5.6 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Pages document...
Memory corruption
The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted document...
CVE-2015-7033
The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted document...
CVE-2015-7034
The Apple iWork application before 2.6 for iOS and Apple Pages before 5.6 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Pages document...
chromium-browser: Bad-cast in PDFium
The CPDFDocument::GetPage function in fpdfapi/fpdfparser/fpdfparserdocument.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, does not properly perform a cast of a dictionary object, which allows remote attackers to cause a denial of service or possibly have unspecified other impact vi...
Adobe Acrobat/Reader Memory Disclosure Vulnerability (CNVD-2015-06746)
Adobe Reader/Acrobat is a popular application for working with PDF files. A memory disclosure vulnerability exists in Adobe Reader/Acrobat that allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could result in access to sensitive memory information...
Adobe Acrobat/Reader Memory Disclosure Vulnerability (CNVD-2015-06752)
Adobe Reader/Acrobat is a popular application for working with PDF files. A memory disclosure vulnerability exists in Adobe Reader/Acrobat. An attacker is allowed to construct a malicious PDF file and trick the user into parsing it, which can obtain sensitive memory information...
Adobe Acrobat/Reader Memory Misreference Vulnerability (CNVD-2015-06686)
Adobe Reader/Acrobat is a popular application for working with PDF files. A memory misreference vulnerability exists in Adobe Reader/Acrobat that allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could crash the application or execute arbitrary code...
Adobe Acrobat/Reader Javascript API Execution Bypass Vulnerability (CNVD-2015-06694)
Adobe Reader/Acrobat is a popular application for working with PDF files. An execution bypass vulnerability exists in Adobe Reader/Acrobat. Allows an attacker to construct a malicious PDF file and trick the user into parsing it, which can bypass Javascript API execution restrictions...
Corel WordPerfect Heap Buffer Overflow Vulnerability
Corel WordPerfect Office Suite is an office software suite. A heap buffer overflow vulnerability exists in the Microsoft Word document conversion feature of Corel WordPerfect, which can be exploited by a remote attacker to execute arbitrary code via a constructed document...