Nitro Software NitroPDF Resource Management Error Vulnerability (CNVD-2019-34907)

Nitro Software NitroPDF is a software for viewing and editing PDF files from Nitro Software, USA. A resource management error vulnerability exists in Nitro Software NitroPDF. An attacker can exploit this vulnerability to achieve remote code execution via specially crafted PDFs...

Ubuntu 16.04 LTS / 18.04 LTS : LibreOffice vulnerability (USN-4138-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4138-1 advisory. It was discovered that LibreOffice incorrectly handled embedded scripts in document files. If a user were tricked into opening a specially crafted...

Ubuntu: Security Advisory (USN-3883-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3883-1: LibreOffice vulnerabilities

It was discovered that LibreOffice incorrectly handled certain document files. If a user were tricked into opening a specially crafted document, a remote attacker could cause LibreOffice to crash, and possibly execute arbitrary code. CVE-2018-10119, CVE-2018-10120, CVE-2018-11790 It was discovere...

CVE-2019-6985

An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Out-of-Bounds Read in Indexing or a Heap Overflow and crash during handling of certain PDF files that embed specifically crafted 3D content, due to an array acces...

PT-2019-18295 · Foxit · Foxit Reader

Name of the Vulnerable Software and Affected Versions: Foxit Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a...

Adobe Reader 2017 Information Disclosure Vulnerability (APSB18-40) - Windows

Adobe Reader 2017 is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat DC 2015 Information Disclosure Vulnerability (APSB18-40) - Mac OS X

Adobe Acrobat DC 2015 is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Resource Management Errors

Overview Affected versions of this package are vulnerable to Resource Management Errors. An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree::GetPageNode function of PdfPagesTree.cpp. Remote attackers could leverage this vulnerability to cause a denial of...

SoftZone Office suffers from a denial of service vulnerability (CNVD-2018-06120)

SoftZone Office RZoffice is an office software, which is compatible with MS Office and consists of three parts: word processing, spreadsheet and presentation. A denial-of-service vulnerability exists in SoftZone Office when dealing with special doc files. An attacker can exploit the vulnerability...

Memory access overflow vulnerability in Polaris office 2017

Polaris Office 2017 is an office software developed by INFRAWARE Korea, which can be used to view and edit Word documents, Excel tables, Microsoft Office PowerPoint slides, and other commonly used office documents. Polaris Office 2017 suffers from a memory access overflow vulnerability when...

Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31175)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Writing 2017 can create, modify and edit doc, docx files. Extreme Writing in Extreme Office suffers from a memory corruption vulnerability when handling special doc...

Ubuntu: Security Advisory (USN-3319-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3319-1: libmwaw vulnerability

It was discovered that libmwaw incorrectly handled certain malformed document files. If a user or automated system were tricked into opening a specially crafted file, a remote attacker could cause libmwaw to crash, resulting in a denial of service, or possibly execute arbitrary code...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-08951)

Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDFs. A memory corruption vulnerability exists in Adobe Reader and Acrobat, which allows remote attackers to exploit the vulnerabilit...

Adobe Acrobat Reader DC Remote Code Execution Vulnerability (CNVD-2016-04909)

Adobe Reader is PDF document reading software. A security vulnerability exists in Adobe Reader DC that allows an attacker to trigger a memory corruption vulnerability in Adobe Reader DC by means of a carefully constructed PDF file, which can be exploited to execute arbitrary code in the context o...

Ubuntu 14.04 LTS : LibreOffice vulnerabilities (USN-2899-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2899-1 advisory. It was discovered that LibreOffice incorrectly handled LWP document files. If a user were tricked into opening a specially crafted LWP document, a remote...

Adobe Acrobat Pro DC OCG Memory Error References Remote Code Execution Vulnerability

Adobe Reader is a PDF document reading software. A security vulnerability exists in Adobe Reader's handling of constructed OCG objects, which allows remote attackers to exploit the vulnerability to construct malicious PDF files and trick users into parsing them, which can crash the application or...

LibreOffice and Apache OpenOffice integer overflow vulnerability (CNVD-2015-07520)

LibreOffice and Apache OpenOffice OOo are both open source office software suites. The suite contains text documents, spreadsheets, presentations, drawings, databases and other software. The former by the Document Foundation The Document Foundation, TDF development; the latter by the United State...

Adobe Acrobat/Reader Memory Disclosure Vulnerability (CNVD-2015-06746)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory disclosure vulnerability exists in Adobe Reader/Acrobat that allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could result in access to sensitive memory information...