Antenna House Rainbow PDF Office server document converter TxMasterStyleAtom parsing code execution vulnerability

Summary A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro MR1 7,0,2019,0220. While parsing a document text info container, the TxMasterStyleAtom::parse function is incorrectly checking the bounds...

CVE-2019-5019

A heap-based overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro R1 7,0,2018,1113. While parsing Document Summary Property Set stream, the getSummaryInformation function is incorrectly checking the correlation betwe...

Heap overflow

A heap-based overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro R1 7,0,2018,1113. While parsing Document Summary Property Set stream, the getSummaryInformation function is incorrectly checking the correlation betwe...

CVE-2019-5019

A heap-based overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro R1 7,0,2018,1113. While parsing Document Summary Property Set stream, the getSummaryInformation function is incorrectly checking the correlation betwe...

CVE-2019-5019

A heap-based overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro R1 7,0,2018,1113. While parsing Document Summary Property Set stream, the getSummaryInformation function is incorrectly checking the correlation betwe...

CVE-2019-5019

CVE-2019-5019 affects Antenna House Rainbow PDF Office Server Document Converter (V7.0 Pro R1, Linux64 7.0.2018.1113). The vulnerability resides in the PowerPoint conversion path via getSummaryInformation, where a misparsed PropertySetStream leads to an out-of-bounds write and heap corruption, en...

Open-Xchange: CSRF combined with IDOR within Document Converter exposes files

Summary There appears to be a vulnerability with the document converter service which allows an authenticated user or guest user with write permissions to export a victim’s files, regardless of permissions in place. An example vulnerable endpoint is the following...

Antenna House Office Server Document Converter for Linux64 Remote Code Execution Vulnerability

Antenna House Office Server Document Converter for Linux64 is a document format converter based on Linux64 platform from Antenna House, which is mainly used to convert Word, Excel and PowerPoint files to PDF, SVG and JPEG files, etc. It is mainly used to convert Word, Excel and PowerPoint files t...

Antenna House Office Server Document Converter for Linux64 Stack Buffer Overflow Vulnerability

Antenna House Office Server Document Converter for Linux64 is a document format converter based on Linux64 platform from Antenna House, which is mainly used to convert Word, Excel and PowerPoint files to PDF, SVG and JPEG files, etc. It is mainly used to convert Word, Excel and PowerPoint files t...

Antenna House Office Server Document Converter for Linux64 'putShapeProperty' Method Code Execution Vulnerability

Antenna House Office Server Document Converter for Linux64 is a document format converter based on Linux64 platform from Antenna House, which is mainly used to convert Word, Excel and PowerPoint files to PDF, SVG and JPEG files, etc. It is mainly used to convert Word, Excel and PowerPoint files t...

Antenna House Office Server Document Converter for Linux64 vbputanld Code Execution Vulnerability

Antenna House Office Server Document Converter for Linux64 is a document format converter based on Linux64 platform from Antenna House, which is mainly used to convert Word, Excel and PowerPoint files to PDF, SVG and JPEG files, etc. It is mainly used to convert Word, Excel and PowerPoint files t...

Antenna House Office Server Document Converter for Linux64 OLEREAD Code Execution Vulnerability

Antenna House Office Server Document Converter for Linux64 is a document format converter based on Linux64 platform from Antenna House, which is mainly used to convert Word, Excel and PowerPoint files to PDF, SVG and JPEG files, etc. It is mainly used to convert Word, Excel and PowerPoint files t...

Antenna House Office Server Document Converter for Linux64 'vbgetfp' Method Code Execution Vulnerability

Antenna House Office Server Document Converter for Linux64 is a document format converter based on Linux64 platform from Antenna House, which is mainly used to convert Word, Excel and PowerPoint files to PDF, SVG and JPEG files, etc. It is mainly used to convert Word, Excel and PowerPoint files t...

CVE-2018-3932

An exploitable stack-based buffer overflow exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312. A crafted Microsoft Word DOC document can lead to a stack-based buffer overflow, resultin...

Remote code execution

An exploitable out-of-bounds write exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312. A crafted Microsoft Word DOC document can lead to an out-of-bounds write, resulting in remote cod...

CVE-2018-3936

In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312, a crafted Microsoft Word DOC document can lead to an out-of-bounds write, resulting in remote code execution...

Heap overflow

An exploitable heap corruption exists in the PowerPoint document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312. A crafted PowerPoint PPT document can lead to heap corruption, resulting in remote code execution...

Remote code execution

In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312, a crafted Microsoft Word DOC document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the vbgetfp method...

Remote code execution

In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312, a crafted Microsoft Word DOC document can lead to an out-of-bounds write, resulting in remote code execution...

CVE-2018-3930

In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312, a crafted Microsoft Word DOC document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the vbgetfp method...