1801 matches found
Code injection
Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted document...
Code injection
Unspecified vulnerability in Investintech.com Able2Extract and Able2Extract Server allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted document...
CVE-2011-4222
Affected products: Investintech Able2Extract and Able2Extract Server 6.0. Issue: memory corruption vulnerability (CVE-2011-4222) exploitable via crafted PDF, potentially causing denial of service or arbitrary code execution. Evidence: PoC demonstrates constructing a PDF payload (e.g., 12000 'A' b...
CVE-2011-4222
Unspecified vulnerability in Investintech.com Able2Extract and Able2Extract Server allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted document...
CVE-2011-4221
Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted document...
CVE-2011-4221
CVE-2011-4221 corresponds to memory corruption in Investintech Able2Doc/Able2Doc Professional 6.0. A user-supplied crafted PDF can crash the application or potentially execute arbitrary code. Public PoCs exploit a buffer pattern (payload = 'B'*13000; crash = 'startxref') to produce a malicious PD...
CVE-2011-3884
Google Chrome before 15.0.874.102 does not properly address timing issues during DOM traversal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document...
CVE-2011-3884
Google Chrome before 15.0.874.102 does not properly address timing issues during DOM traversal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document...
Design/Logic Flaw
Google Chrome before 15.0.874.102 does not properly address timing issues during DOM traversal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document...
CVE-2011-3884
Removed by vendor...
Design/Logic Flaw
Apple Type Services ATS in Apple Mac OS X through 10.6.8 does not properly handle embedded Type 1 fonts, which allows remote attackers to execute arbitrary code via a crafted document that triggers an out-of-bounds memory access...
CVE-2011-0229
Apple Type Services (ATS) in OS X up to 10.6.8 is affected by CVE-2011-0229 due to an out-of-bounds memory access when handling embedded Type 1 fonts, enabling remote code execution via a crafted document. Appleās advisory for Security Update 2011-006 (and related Lion updates) remedies this by u...
CVE-2011-2861
Google Chrome before 14.0.835.163 does not properly handle strings in PDF documents, which allows remote attackers to have an unspecified impact via a crafted document that triggers an incorrect read operation...
CVE-2011-2847
Use-after-free vulnerability in the document loader in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document...
Design/Logic Flaw
Google Chrome before 14.0.835.163 does not properly handle strings in PDF documents, which allows remote attackers to have an unspecified impact via a crafted document that triggers an incorrect read operation...
CVE-2011-2847
Use-after-free vulnerability in the document loader in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document...
CVE-2011-2841
Google Chrome before 14.0.835.163 does not properly perform garbage collection during the processing of PDF documents, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document...
CVE-2011-2847
Use-after-free vulnerability in the document loader in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document...
CVE-2011-2847
Removed by vendor...
CVE-2011-2841
Removed by vendor...