Lucene search
+L

1808 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/01 12:00 a.m.•5 views

CVE-2018-4038: Incorrect Calculation of Buffer Size

An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, while trying to null-terminate a string. A specially crafted document can allow an attacker to pass an untrusted value as a length to a constructor. This...

8.8CVSS8.1AI score0.01279EPSS
SaveExploits1References2
Talos Blog
Talos Blog
•added 2018/11/20 7:35 a.m.•57 views

Vulnerability Spotlight: Multiple remote code execution vulnerabilities in Atlantis Word Processor

A member of Cisco Talos discovered these vulnerabilities. Executive summary Today, Cisco Talos is disclosing three remote code execution vulnerabilities in the Atlantis Word Processor. Atlantis Word Processor is a traditional word processor that provides a number of basic features for users, in...

6.8CVSS1.4AI score0.01426EPSS
SaveExploits3
Talos
Talos
•added 2018/11/20 12:00 a.m.•255 views

Atlantis Word Processor open document format unchecked NewAnsiString length remote code execution vulnerability

Summary An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, while trying to null-terminate a string. A specially crafted document can allow an attacker to pass an untrusted value as a length to a constructor. This...

8.8CVSS8AI score0.01279EPSS
SaveExploits1
CNVD
CNVD
•added 2018/11/09 12:00 a.m.•7 views

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2018-26097)

Kingsoft PDF Reader is a compact and stable PDF reading tool. Kingsoft PDF Reader has a denial of service vulnerability that can be exploited by attackers to cause a denial of service by constructing a specific pdf file...

6.7AI score
SaveExploits0
CNVD
CNVD
•added 2018/11/09 12:00 a.m.•11 views

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2018-26096)

Kingsoft PDF Reader is a compact and stable PDF reading tool. Kingsoft PDF Reader has a denial of service vulnerability that can be exploited by attackers to cause a denial of service by constructing a specific pdf file...

6.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2018/10/26 12:00 a.m.•11 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer limit in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS7.8AI score0.13459EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2018/10/26 12:00 a.m.•17 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to memory usage after memory release, allows attackers to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created PDF file...

10CVSS7.6AI score0.04833EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2018/10/26 12:00 a.m.•9 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to memory usage after memory release, allows attackers to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS7.6AI score0.16873EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2018/10/26 12:00 a.m.•12 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to memory usage after memory release, allows attackers to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS7.6AI score0.04833EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2018/10/26 12:00 a.m.•14 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer limit in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS7.8AI score0.15925EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2018/10/26 12:00 a.m.•11 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer limit in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS7.8AI score0.15925EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2018/10/26 12:00 a.m.•14 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer limit in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS7.8AI score0.13459EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2018/10/26 12:00 a.m.•15 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer limit in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS7.8AI score0.19005EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2018/10/26 12:00 a.m.•10 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to memory usage after memory release, allows attackers to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS7.6AI score0.04921EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2018/10/26 12:00 a.m.•11 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer limit in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS7.8AI score0.15925EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2018/10/26 12:00 a.m.•12 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created U3D file...

10CVSS7.8AI score0.13535EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2018/10/26 12:00 a.m.•12 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to memory usage after memory release, allows attackers to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS7.6AI score0.04528EPSS
SaveExploits0References6
OSV
OSV
•added 2018/10/25 1:29 p.m.•42 views

UBUNTU-CVE-2018-18651

An issue was discovered in Xpdf 4.00. catalog-getNumPages in AcroForm.cc allows attackers to launch a denial of service hang caused by large loop via a specific pdf file, as demonstrated by pdftohtml. This is mainly caused by a large number after the /Count field in the file...

5.5CVSS6AI score0.00933EPSS
SaveExploits1References3
CNVD
CNVD
•added 2018/10/22 12:00 a.m.•17 views

Xpdf GfxImageColorMap class stack buffer overflow vulnerability

Xpdf is Foo Labs developed an open source PDF reader , it supports decoding LZW compressed format files and read encrypted PDF files . Xpdf 4.00 version of the GfxState.cc file in the GfxImageColorMap class has a stack buffer overflow vulnerability. An attacker can exploit this vulnerability to...

5.5CVSS7.1AI score0.01141EPSS
SaveExploits0References1
OSV
OSV
•added 2018/10/17 3:44 p.m.•8 views

GHSA-4XR4-4C65-HJ7F Apache Tika does not properly initialize the XML parser or choose handlers

Apache Tika before 1.13 does not properly initialize the XML parser or choose handlers, which might allow remote attackers to conduct XML External Entity XXE attacks via vectors involving 1 spreadsheets in OOXML files and 2 XMP metadata in PDF and other file formats, a related issue to...

7.8CVSS7.1AI score0.03573EPSS
SaveExploits0References8
Rows per page
Query Builder