CVE-2018-3921

A memory corruption vulnerability exists in the PSD-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PSD image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver a PSD image to trigger this vulnerability and...

PT-2018-16313 · Computerinsel · Photoline

Name of the Vulnerable Software and Affected Versions: Computerinsel Photoline version 20.54 Description: A memory corruption issue exists in the PSD-parsing functionality. Processing a specially crafted PSD image can lead to a stack overflow, allowing an attacker to overwrite arbitrary data and...

CVE-2018-14292

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

[SECURITY] Fedora 28 Update: tika-1.17-1.fc28

The Apache Tika toolkit detects and extracts meta-data and structured text content from various documents using existing parser libraries...

Denial of Service Vulnerability in WPS office 2016 Personal and Enterprise Edition

WPS office is an office software suite independently developed by Kingsoft Corporation. A denial of service vulnerability exists in WPS office 2016 Personal and Enterprise editions when parsing certain pdf files. The vulnerability is due to a function in the wpsmain module failing to do a checksu...

Memory corruption vulnerability exists in WPS Office 2016 text (CNVD-2018-04744)

WPS office is an office software suite independently developed by Kingsoft Corporation. A memory corruption vulnerability exists in WPS text wps.exe in WPS when parsing a specific doc file. An attacker can exploit the vulnerability to cause a denial of service or code execution...

Memory Corruption Vulnerability in WPS Office 2016 Text wpsdocxrw Module

WPS office is an office software suite independently developed by Kingsoft Corporation. A memory corruption vulnerability exists in the wpsdocxrw module of WPS text wps.exe in WPS when parsing a specific docx file. An attacker can exploit the vulnerability to cause a denial of service...

Denial of Service Vulnerability in WPS Office 2016 Enterprise Edition

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. A denial of service vulnerability exists in WPS Office 2016 Enterprise Edition when parsi...

Denial of Service Vulnerability in WPS Office 2016 Personal Edition, Enterprise Edition and Kingsoft pdf

WPS Office is an office software suite independently developed by Kingsoft Corporation. Kingsoft PDF is a PDF reading tool. A denial of service vulnerability exists in WPS Office 2016 Personal Edition, Enterprise Edition and Kingsoft pdf when parsing pdf files. The vulnerability is caused due to...

Memory Corruption Vulnerability in WPS Text

WPS office is an office software suite independently developed by Kingsoft Corporation. A memory corruption exists in WPS text wps.exe in WPS when parsing a specific docx file, which can be exploited by an attacker to cause a denial of service or possibly code execution...

XML External Entity (XXE)

jbpm-designer-backend is vulnerable to XML external entity XXE attacks. The application does not parse XML documents properly, allowing a malicious user to conduct a XML external entity attack...

Apache OpenOffice DOC File Parsing Remote Code Execution Vulnerability

Apache OpenOffice is open and free word processing software. The OpenOffice Writer DOC file parser and WW8Fonts constructor handles DOC file vulnerabilities, allowing remote attackers to exploit the vulnerability by submitting a special file and tricking the user into parsing it, which can crash...

Iceni Infix PDF Parsing SetSize Code Execution Vulnerability

Iceni Technlology Infix is a PDF format document editing tool from the British company Iceni Technlology. The tool has text editing, spell checking, find and replace and other functions. A security vulnerability exists in the PDF parsing feature of Iceni Technlology Infix version 7.1.5. The...

Updated java-1.8.0-openjdk packages fix security vulnerability

An untrusted library search path flaw was found in the JCE component of OpenJDK. A local attacker could possibly use this flaw to cause a Java application using JCE to load an attacker-controlled library and hence escalate their privileges CVE-2017-3511. It was found that the JAXP component of...

PT-2017-9754 · Nitro · Nitro Pro

Name of the Vulnerable Software and Affected Versions: Nitro Pro version 10 Description: A potential remote code execution issue exists in the PDF parsing functionality. A specially crafted PDF file can cause this issue, resulting in potential code execution. An attacker can send the victim a...

Debian DLA-581-1 : libreoffice security update

Aleksandar Nikolic discovered that missing input sanitising in the RTF parser in Libreoffice may result in the execution of arbitrary code if a malformed documented is opened. For Debian 7 'Wheezy', these problems have been fixed in version 1:3.5.4+dfsg2-0+deb7u7. We recommend that you upgrade yo...

Libxml2 Formatted String Vulnerability

Libxml2 is the GNOME project team developed a C-based language used to parse XML documents library , which supports a variety of encoding formats , Xpath parsing , Well-formed and valid validation and so on. A format string vulnerability exists in Libxml2. An attacker could exploit this...

Comodo - Integer Overlow Leading to Heap Overflow Parsing Composite Documents

Comodo - Integer Overlow Leading to Heap Overflow Parsing Composite Documents Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=762 In COleMemFile::LoadDiFatList, values from the header are used to parse the document FAT. If header.csectDif is very high, the calculation overflows...

CVE-2016-0795

LibreOffice before 5.0.5 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted LwpTocSuperLayout record in a LotusWordPro lwp document...

Wieland wieplan 4.1 Document Parsing Java Code Execution Using XMLDecoder

Wieland wieplan 4.1 Document Parsing Java Code Execution Using XMLDecoder Vendor: Wieland Electric GmbH Product web page: http://www.wieland-electric.com Affected version: 4.1 Build 9 Summary: Your new software for the configuration of Wieland terminal rails. wieplan enables you to plan a...