3 matches found
CVE-2019-12154
XXE in the XML parser library in RealObjects PDFreactor before 10.1.10722 allows attackers to supply malicious XML content in externally referenced resources, leading to disclosure of local file contents and/or denial of service conditions...
CVE-2019-12154
XXE in the XML parser library in RealObjects PDFreactor before 10.1.10722 allows attackers to supply malicious XML content in externally referenced resources, leading to disclosure of local file contents and/or denial of service conditions...
CVE-2019-12154
RealObjects PDFreactor prior to 10.1.10722 is affected by a XXE flaw in the XML parser library triggered by malicious XML in externally referenced resources. This can disclose local file contents and may cause denial of service. If you use PDFreactor, upgrade to the maintenance release 10-1-10722...