CVE-2016-3281

Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka...

Adobe Acrobat Reader DC Remote Code Execution Vulnerability (CNVD-2016-04912)

Adobe Reader is PDF document reading software. A security vulnerability exists in Adobe Reader DC that allows an attacker to trigger a memory corruption vulnerability in Adobe Reader DC through a carefully constructed PDF file, which can be exploited by an attacker to execute arbitrary code in th...

Adobe Acrobat Reader DC Remote Code Execution Vulnerability (CNVD-2016-04909)

Adobe Reader is PDF document reading software. A security vulnerability exists in Adobe Reader DC that allows an attacker to trigger a memory corruption vulnerability in Adobe Reader DC by means of a carefully constructed PDF file, which can be exploited to execute arbitrary code in the context o...

The vulnerability of the Microsoft Office software package, which allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the Microsoft Office suite arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially crafted document...

The vulnerability of the Microsoft Office software package, which allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the Microsoft Office suite arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially crafted document...

The vulnerability of Adobe Reader software allows a malicious individual to compromise the confidentiality of protected information.

The vulnerability exists in Adobe Reader due to the incorrect implementation of the JavaScript API. Exploiting this vulnerability allows malicious actors, operating remotely, to gain access to confidential information through a specially crafted PDF document...

The vulnerability of Acrobat software allows a malicious individual to compromise the confidentiality of protected information.

The vulnerability exists in Acrobat due to incorrect implementation of the JavaScript API. Exploiting this vulnerability allows malicious actors, operating remotely, to gain access to confidential information through a specially crafted PDF document...

Vulnerability of the Windows operating system and the Microsoft Edge browser, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system and the Microsoft Edge browser exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted PDF document from a remote location...

Microsoft Edge browser’s vulnerability, which allows a hacker to bypass content protection policies

The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass content protection policies using a specially crafted document...

USN-3022-1 libreoffice vulnerability

It was discovered that LibreOffice incorrectly handled RTF document files. If a user were tricked into opening a specially crafted RTF document, a remote attacker could cause LibreOffice to crash, and possibly execute arbitrary code...

CVE-2016-0278

Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277, CVE-2016-0279, and CVE-2016-0301...

Heap overflow

Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277, CVE-2016-0278, and CVE-2016-0279...

libxml2: Heap-based buffer-overread in xmlNextChar

The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted XML document...

libxml2: Heap-based buffer overread in xmlDictAddString

The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted XML document...

libxml2: Heap use-after-free in htmlPArsePubidLiteral and htmlParseSystemiteral

Multiple use-after-free vulnerabilities in the 1 htmlPArsePubidLiteral and 2 htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a...

The vulnerability of the PHP interpreter, allowing attackers to execute XXE and XXL attacks

The vulnerability of the ext/libxml/libxml.c file in the PHP interpreter arises from the fact that, when using PHP-FPM, the isolation of individual data threads is not properly implemented. Exploiting this vulnerability allows a remote attacker to execute XXE and XXL attacks using a specially...

The vulnerability of the LibXLST transformation library allows a attacker to cause a service failure or exert other effects.

The vulnerability of the numbers.c file in the XLST transformation library LibXLST is related to incorrect processing of the xsl:number format. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects through a specially crafted document...

The vulnerability of the Expat scraping library allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Expat parsing library arises due to buffer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure or execute arbitrary code crashloop using a specially crafted document...

The vulnerability of the LibXLST transformation library allows a attacker to cause a service failure or exert other effects.

The vulnerability of the numbers.c file in the LibXLST library is related to errors in name space handling. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects through a specially crafted document...

CVE-2016-3233

Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...