Lucene search
+L

1847 matches found

CNVD
CNVD
added 2018/11/09 12:00 a.m.5 views

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2018-26091)

Kingsoft PDF Reader is a compact and stable PDF reading tool. Kingsoft PDF Reader has a denial of service vulnerability that can be exploited by attackers to cause a denial of service by constructing a specific pdf file...

6.7AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2018/10/30 3:16 p.m.19 views

poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service

The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service infinite recursion via a crafted PDF file, as demonstrated by pdftops...

5.5CVSS7.4AI score0.01883EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2018/10/26 12:00 a.m.9 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to memory usage after memory release, allows attackers to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS7.6AI score0.04921EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2018/10/26 12:00 a.m.9 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer limit in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS7.8AI score0.16014EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2018/10/26 12:00 a.m.13 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer limit in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS7.8AI score0.15925EPSS
SaveExploits0References5
CNVD
CNVD
added 2018/10/22 12:00 a.m.20 views

Xpdf 'DCTStream::decodeImage' function out-of-bounds read vulnerability

Xpdf is Foo Labs developed an open source PDF reader , it supports decoding LZW compressed format files and read encrypted PDF files . Xpdf 4.00 version of the Stream.cc file in the 'DCTStream::decodeImage' function has an out-of-bounds read vulnerability. A remote attacker can exploit this...

5.5CVSS6.8AI score0.01141EPSS
SaveExploits0References1
OSV
OSV
added 2018/10/18 6:29 a.m.72 views

DEBIAN-CVE-2018-18454

CCITTFaxStream::readRow in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

5.5CVSS6.9AI score0.01221EPSS
SaveExploits0References1
OSV
OSV
added 2018/10/18 6:29 a.m.18 views

DEBIAN-CVE-2018-18458

The function DCTStream::decodeImage in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

5.5CVSS6.7AI score0.01141EPSS
SaveExploits0References1
OSV
OSV
added 2018/10/18 6:29 a.m.11 views

DEBIAN-CVE-2018-18457

The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

5.5CVSS6.7AI score0.01141EPSS
SaveExploits0References1
OSV
OSV
added 2018/10/18 6:29 a.m.11 views

UBUNTU-CVE-2018-18457

The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

5.5CVSS5.8AI score0.01141EPSS
SaveExploits0References4
CNVD
CNVD
added 2018/10/12 12:00 a.m.4 views

Kingsoft Office PDF Reader has Denial of Service Vulnerability

Kingsoft Office PDF Reader is a compact and stable PDF reading tool. Kingsoft Office PDF Reader has a denial of service vulnerability that can be exploited by attackers to cause a denial of service by constructing a specific pdf file...

6.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2018/10/11 12:00 a.m.13 views

The vulnerability of the Office Open XML Text Processor, the Atlantis Word Processor, allows a hacker to execute arbitrary code.

The vulnerability of the Office Open XML Text Processor, the Atlantis Word Processor, arises due to errors during initialization of pointers. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within an application, using a specially created document...

10CVSS6AI score0.01456EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/10/11 12:00 a.m.15 views

The vulnerability of the Word document processor, the Atlantis Word Processor, allows a hacker to execute arbitrary code.

The vulnerability of the Word text processor Atlantis Word Processor arises from an overflow in the buffer in the “bucket”. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the application, using a specially created document...

10CVSS6.3AI score0.01389EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
added 2018/10/10 12:00 a.m.14 views

Foxit PDF Reader JavaScript Engine Remote Code Execution Vulnerability (CNVD-2018-20711)

Foxit PDF Reader is China's Foxit Foxit Software Corporation of a PDF document reader. JavaScript engine is one of the JavaScript scripting engine. A remote code execution vulnerability exists in the this.dataObjects object of the JavaScript engine in Foxit PDF Reader. A remote attacker can explo...

8CVSS7.9AI score0.06219EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/10/10 12:00 a.m.11 views

Foxit PDF Reader JavaScript Engine Remote Code Execution Vulnerability (CNVD-2018-20715)

Foxit PDF Reader is China's Foxit Foxit Software Corporation of a PDF document reader. JavaScript engine is one of the JavaScript scripting engine. A post-release reuse vulnerability exists in the JavaScript engine in Foxit PDF Reader. A remote attacker can exploit this vulnerability to execute...

8.8CVSS7.8AI score0.03155EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/10/10 12:00 a.m.11 views

Foxit PDF Reader JavaScript Engine Remote Code Execution Vulnerability (CNVD-2018-20712)

Foxit PDF Reader is China's Foxit Foxit Software Corporation of a PDF document reader. JavaScript engine is one of the JavaScript scripting engine. A remote code execution vulnerability exists in the this.bookmarkRoot.children object of the JavaScript engine in Foxit PDF Reader. A remote attacker...

8CVSS7.9AI score0.06043EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/10/10 12:00 a.m.8 views

Foxit PDF Reader JavaScript Engine Remote Code Execution Vulnerability (CNVD-2018-20714)

Foxit PDF Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A remote code execution vulnerability exists in the getPageNthWord method of the JavaScript engine in Foxit Reader. A remote attacker can exploit this vulnerability to execute arbitrary code with the help of a...

8.8CVSS8.2AI score0.03155EPSS
SaveExploits1References1
OSV
OSV
added 2018/10/08 6:29 p.m.9 views

UBUNTU-CVE-2018-18064

cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c the generate and renderrows functions and cairo-image-compositor.c the cairoimagespansandzero function...

6.5CVSS6.9AI score0.0148EPSS
SaveExploits1References2
NVD
NVD
added 2018/10/08 6:29 p.m.32 views

CVE-2018-18064

cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c the generate and renderrows functions and cairo-image-compositor.c the cairoimagespansandzero function...

6.5CVSS6.6AI score0.0148EPSS
SaveExploits1References2
OSV
OSV
added 2018/10/08 4:29 p.m.5 views

CVE-2018-3941

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the...

8.8CVSS6AI score0.03155EPSS
SaveExploits1References3
Rows per page
Query Builder