CVE-2016-3360

Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 for Mac, Office Compatibility Pack SP3, PowerPoint Viewer, SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute...

Foxit Reader and PhantomPDF Remote Code Execution Vulnerability (CNVD-2016-06997)

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. Foxit Reader and PhantomPDF 8.0.0.624 and earlier versions have a security vulnerability that can be triggered when opening a carefully...

The vulnerability of the Microsoft Office suite of programs, the Microsoft Word text editor, the Word Viewer program for reading DOC files, and the Microsoft Office Compatibility Pack allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office package, the Microsoft Word text editor, the Word Viewer document viewing program, and the Microsoft Office Compatibility Pack is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-06268)

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A memory corruption vulnerability exists in Microsoft Office due to the program not properly handling memory objects. Allowing a remote attacker to pass through a constructed Office...

The vulnerability of the libxml2 library, which allows a hacker to trigger a service failure

The vulnerability in the dict.c function of the libxml2 library arises due to buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure termination of the application by using a special symbol after the "!DOCTYPE html" tag in a specially...

OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962)

It was discovered that the JAXP component in OpenJDK did not properly enforce the totalEntitySizeLimit limit. An attacker able to make a Java application process a specially crafted XML file could use this flaw to make the application consume an excessive amount of memory...

CVE-2016-3280

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption...

CVE-2016-3281

Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka...

CVE-2016-3280

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption...

Adobe Acrobat Reader DC Remote Code Execution Vulnerability (CNVD-2016-04909)

Adobe Reader is PDF document reading software. A security vulnerability exists in Adobe Reader DC that allows an attacker to trigger a memory corruption vulnerability in Adobe Reader DC by means of a carefully constructed PDF file, which can be exploited to execute arbitrary code in the context o...

Adobe Acrobat Reader DC Remote Code Execution Vulnerability (CNVD-2016-04912)

Adobe Reader is PDF document reading software. A security vulnerability exists in Adobe Reader DC that allows an attacker to trigger a memory corruption vulnerability in Adobe Reader DC through a carefully constructed PDF file, which can be exploited by an attacker to execute arbitrary code in th...

The vulnerability of the Microsoft Office software package, which allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the Microsoft Office suite arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially crafted document...

The vulnerability of the Microsoft Office software package, which allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the Microsoft Office suite arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially crafted document...

The vulnerability of Adobe Reader software allows a malicious individual to compromise the confidentiality of protected information.

The vulnerability exists in Adobe Reader due to the incorrect implementation of the JavaScript API. Exploiting this vulnerability allows malicious actors, operating remotely, to gain access to confidential information through a specially crafted PDF document...

The vulnerability of Acrobat software allows a malicious individual to compromise the confidentiality of protected information.

The vulnerability exists in Acrobat due to incorrect implementation of the JavaScript API. Exploiting this vulnerability allows malicious actors, operating remotely, to gain access to confidential information through a specially crafted PDF document...

Vulnerability of the Windows operating system and the Microsoft Edge browser, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system and the Microsoft Edge browser exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted PDF document from a remote location...

Microsoft Edge browser’s vulnerability, which allows a hacker to bypass content protection policies

The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass content protection policies using a specially crafted document...

USN-3022-1 libreoffice vulnerability

It was discovered that LibreOffice incorrectly handled RTF document files. If a user were tricked into opening a specially crafted RTF document, a remote attacker could cause LibreOffice to crash, and possibly execute arbitrary code...

CVE-2016-0278

Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277, CVE-2016-0279, and CVE-2016-0301...

Heap overflow

Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277, CVE-2016-0278, and CVE-2016-0279...