DEBIAN-CVE-2016-8729

An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. A specially crafted PDF can cause a negative number to be passed to a memset resulting in memory corruption and potential code execution. An attacker can specially craft a PDF and send to the victim to...

DEBIAN-CVE-2016-9601

ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2decodegrayscaleimage function which is used to decode halftone segments in a JBIG2 image. A document PostScript or PDF with an embedded, specially crafted, jbig2 image could trigge...

UBUNTU-CVE-2018-10289

In MuPDF 1.13.0, there is an infinite loop in the fzskipspace function of the pdf/pdf-xref.c file. A remote adversary could leverage this vulnerability to cause a denial of service via a crafted pdf file...

PT-2018-9803

Name of the Vulnerable Software and Affected Versions: MuPDF version 1.13.0 Description: The issue is related to an infinite loop in the fz skip space function of the pdf/pdf-xref.c file. This could allow a remote adversary to cause a denial of service via a crafted pdf file. Recommendations: For...

DEBIAN-CVE-2018-0202

clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format .pdf...

Exempi Denial of Service Vulnerability (CNVD-2018-06683)

Exempi is an open source implementation of XMP based on the Adobe XMP SDK. A security vulnerability exists in versions of Exempi prior to 2.4.3. A remote attacker can exploit this vulnerability to cause a denial of service memory copy invalid memory misreference with the help of a .pdf file with...

UBUNTU-CVE-2017-18234

An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service invalid memcpy with resultant use-after-free or possibly have unspecified other impact via a .pdf file containing JPEG data, related to XMPFiles/source/FormatSupport/ReconcileTIFF.cpp,...

DEBIAN-CVE-2018-8100

The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a specific pdf file, as demonstrated by pdftohtml...

UBUNTU-CVE-2018-8101

The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

chromium-browser: integer overflow in pdfium

An integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

USN-3592-1 clamav vulnerabilities

It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2018-0202 Hanno Böck discovered that ClamAV incorrectly handled parsing certain X...

SumatraPDF Reader Memory Misreference Vulnerability

SumatraPDF Reader is a free software to view PDF files. A memory misreference vulnerability exists in version 2.x of SumatraPDF Reader prior to 2.2.1. A remote attacker can exploit this vulnerability to execute arbitrary code with the help of specially crafted PDF files...

UBUNTU-CVE-2018-7173

A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding...

JavaScript Engine Heap Overflow Vulnerability in Multiple Adobe Products

Acrobat DC Continuous Track and so on are the products of the United States Ordoby Adobe.Acrobat DC Continuous Track is a desktop version of the PDF solution of the continuous update version.Reader DC Continuous Track is a PDF reading tool of the continuous update version! JavaScript engine is on...

Memory Misreference Vulnerability in Multiple Adobe Products (CNVD-2018-05051)

Acrobat DC Continuous Track and so on are the United States of America Auduby Adobe company's products. Acrobat DC Continuous Track is a desktop version of the continuous update of the PDF solution. Reader DC Continuous Track is a continuous update of the PDF reading tool version. Reader DC...

Multiple Adobe Products JBIG2 Decoder Memory Misreference Vulnerability

Acrobat DC Continuous Track and so on are the United States of America Ordoby Adobe company's products. Acrobat DC Continuous Track is a desktop version of the continuous update of the PDF solution. Reader DC Continuous Track is a continuous update of the version of the PDF reading tool. JBIG2...

JavaScript API Memory Misreference Vulnerability in Multiple Adobe Products

Acrobat DC Continuous Track and so on are the products of the United States Ordoby Adobe.Acrobat DC Continuous Track is a desktop version of the continuous update of the PDF solution.Reader DC Continuous Track is a continuous update of the PDF reading tool version. JavaScript API is one of the...

Foxit Reader and PhantomPDF Heap Buffer Overflow Vulnerability

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. A heap buffer overflow vulnerability exists in Foxit Reader and PhantomPDF versions 7.3.4.311 and earlier. A remote attacker could exploit this vulnerability with Bezier data in...

CVE-2016-6169

Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service memory corruption and application crash or potentially execute arbitrary code via the Bezier data in a crafted PDF file...

Memory Corruption Vulnerability in AnyPDF Reader 5.5

AnyPDF Reader is a simple and practical PDF reader developed by Beijing Ancetone Information Technology Co. AnyPDF Reader version 5.5 has a memory corruption vulnerability when dealing with special PDF files, which can be exploited by attackers to cause denial of service attacks...