Lucene search
+L

1808 matches found

OSV
OSV
•added 2019/01/28 9:29 a.m.•11 views

CVE-2019-6983

An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Integer Overflow and crash during the handling of certain PDF files that embed specifically crafted 3D content, because of a free of valid memory...

6.5CVSS6.6AI score0.01117EPSS
SaveExploits0References1
OSV
OSV
•added 2019/01/28 9:29 a.m.•10 views

CVE-2019-6982

An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Out-of-Bounds Write and crash during the handling of certain PDF files that embed specifically crafted 3D content, because of the improper handling of a logic...

5.5CVSS6.1AI score0.02512EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/01/11 12:00 a.m.•13 views

Google Chrome PDFium Out-of-Bounds Memory Access Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. Google Chrome 51.0.2704.63 previous version of PDFium security vulnerabilities, the vulnerability stems from the program failed to adequately verify the image...

8.8CVSS8.9AI score0.00794EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/01/04 12:00 a.m.•20 views

Foxit Reader and PhantomPDF for Windows Validation Bypass Vulnerability

Foxit Reader for Windows is China's Foxit Foxit software company's a Windows-based platform for PDF document reader. PhantomPDF for Windows is its commercial version. A validation bypass vulnerability exists in Foxit Reader 9.3.0.10826 and earlier versions and PhantomPDF 9.3.0.10826 and earlier...

5.3CVSS6.8AI score0.01146EPSS
SaveExploits0References1
OSV
OSV
•added 2019/01/03 1:29 p.m.•6 views

DEBIAN-CVE-2018-20662

In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing...

6.5CVSS7AI score0.02262EPSS
SaveExploits0References1
OSV
OSV
•added 2019/01/02 6:29 p.m.•11 views

DEBIAN-CVE-2018-19478

In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file...

5.5CVSS6.9AI score0.01888EPSS
SaveExploits0References1
OSV
OSV
•added 2019/01/02 6:29 p.m.•18 views

UBUNTU-CVE-2018-19478

In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file...

5.5CVSS6.8AI score0.01888EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/12/29 12:00 a.m.•36 views

Artifex Software Ghostscript Denial of Service Vulnerability (CNVD-2018-26917)

Artifex Software Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. print Postscript files on...

5.5CVSS6.7AI score0.01888EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2018/12/13 12:00 a.m.•18 views

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Reader, and Adobe Acrobat Document Cloud, related to the manipulation of the zero pointer, allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat, Adobe Reader, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud are related to the manipulation of the zero pointer. Exploiting these vulnerabilities can allow attackers to execute arbitrary code remotely,...

9.3CVSS7.6AI score0.27967EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2018/12/13 12:00 a.m.•16 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat, Adobe Reader, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud involve memory management issues after the memory is freed. These vulnerabilities allow attackers to exploit these weaknesses and execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat, Adobe Reader, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow attackers to enhance their privileges and execu...

9.3CVSS7.7AI score0.04181EPSS
SaveExploits0References4
CNVD
CNVD
•added 2018/12/12 12:00 a.m.•8 views

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2019-12289)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have an out-of-bounds read vulnerability. An attacker can exploit this vulnerability to obtain information...

6.5CVSS6.6AI score0.03774EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/12/12 12:00 a.m.•11 views

Adobe Acrobat and Reader Memory Misreference Vulnerability (CNVD-2019-09060)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have a memory misreference vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

10CVSS7.3AI score0.05682EPSS
SaveExploits0References1
OSV
OSV
•added 2018/12/11 4:29 p.m.•9 views

DEBIAN-CVE-2018-17481

Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

8.8CVSS8.8AI score0.01606EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/12/11 12:00 a.m.•14 views

Memory Misreference Vulnerability in Adobe Acrobat and Reader

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader have a memory misreference vulnerability that can be exploited b...

9.3CVSS7.8AI score0.03599EPSS
SaveExploits0
OSV
OSV
•added 2018/12/01 6:29 p.m.•14 views

CVE-2018-4038

An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, while trying to null-terminate a string. A specially crafted document can allow an attacker to pass an untrusted value as a length to a constructor. This...

7.8CVSS6.2AI score0.01279EPSS
SaveExploits1References1
NVD
NVD
•added 2018/12/01 6:29 p.m.•29 views

CVE-2018-4038

An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, while trying to null-terminate a string. A specially crafted document can allow an attacker to pass an untrusted value as a length to a constructor. This...

8.8CVSS8.1AI score0.01279EPSS
SaveExploits1References1
Prion
Prion
•added 2018/12/01 6:29 p.m.•20 views

Design/Logic Flaw

An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, while trying to null-terminate a string. A specially crafted document can allow an attacker to pass an untrusted value as a length to a constructor. This...

6.8CVSS7.7AI score0.01279EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2018/12/01 6:00 p.m.•39 views

CVE-2018-4038

An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, while trying to null-terminate a string. A specially crafted document can allow an attacker to pass an untrusted value as a length to a constructor. This...

8.8CVSS7.7AI score0.01279EPSS
SaveExploits1References1
CVE
CVE
•added 2018/12/01 6:00 p.m.•86 views

CVE-2018-4038

CVE-2018-4038 is a memory-corruption, arbitrary-write vulnerability in the Atlantis Word Processor open document format parser. Cisco Talos details show the issue stems from an insecure length handling in the NewAnsiString path within the parser’s buffer/heap management (text processing via LStrS...

8.8CVSS7.7AI score0.01279EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/01 12:00 a.m.•4 views

CVE-2018-4038: Incorrect Calculation of Buffer Size

An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, while trying to null-terminate a string. A specially crafted document can allow an attacker to pass an untrusted value as a length to a constructor. This...

8.8CVSS8.1AI score0.01279EPSS
SaveExploits1References2
Rows per page
Query Builder