Computerinsel Photoline Stack Buffer Overflow Vulnerability

Computerinsel Photoline is a suite of image editing software. A stack buffer overflow vulnerability exists in the PSD parsing feature in Computerinsel Photoline version 20.54. An attacker can exploit this vulnerability by sending a specially crafted PSD image to overwrite arbitrary data and execu...

CVE-2018-3921

A memory corruption vulnerability exists in the PSD-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PSD image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver a PSD image to trigger this vulnerability and...

PT-2018-16313 · Computerinsel · Photoline

Name of the Vulnerable Software and Affected Versions: Computerinsel Photoline version 20.54 Description: A memory corruption issue exists in the PSD-parsing functionality. Processing a specially crafted PSD image can lead to a stack overflow, allowing an attacker to overwrite arbitrary data and...

CVE-2018-14292

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-14291: Use After Free

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-14289: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-14292: Use After Free

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2018-12411

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 9.1.5096 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fl...

[SECURITY] Fedora 28 Update: tika-1.17-1.fc28

The Apache Tika toolkit detects and extracts meta-data and structured text content from various documents using existing parser libraries...

Denial of Service Vulnerability in WPS office 2016 Personal and Enterprise Edition

WPS office is an office software suite independently developed by Kingsoft Corporation. A denial of service vulnerability exists in WPS office 2016 Personal and Enterprise editions when parsing certain pdf files. The vulnerability is due to a function in the wpsmain module failing to do a checksu...

Memory Corruption Vulnerability in WPS Office 2016 Text wpsdocxrw Module

WPS office is an office software suite independently developed by Kingsoft Corporation. A memory corruption vulnerability exists in the wpsdocxrw module of WPS text wps.exe in WPS when parsing a specific docx file. An attacker can exploit the vulnerability to cause a denial of service...

Memory corruption vulnerability exists in WPS Office 2016 text (CNVD-2018-04744)

WPS office is an office software suite independently developed by Kingsoft Corporation. A memory corruption vulnerability exists in WPS text wps.exe in WPS when parsing a specific doc file. An attacker can exploit the vulnerability to cause a denial of service or code execution...

Denial of Service Vulnerability in WPS Office 2016 Enterprise Edition

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. A denial of service vulnerability exists in WPS Office 2016 Enterprise Edition when parsi...

Denial of Service Vulnerability in WPS Office 2016 Personal Edition, Enterprise Edition and Kingsoft pdf

WPS Office is an office software suite independently developed by Kingsoft Corporation. Kingsoft PDF is a PDF reading tool. A denial of service vulnerability exists in WPS Office 2016 Personal Edition, Enterprise Edition and Kingsoft pdf when parsing pdf files. The vulnerability is caused due to...

Memory Corruption Vulnerability in WPS Text

WPS office is an office software suite independently developed by Kingsoft Corporation. A memory corruption exists in WPS text wps.exe in WPS when parsing a specific docx file, which can be exploited by an attacker to cause a denial of service or possibly code execution...

XML External Entity (XXE)

jbpm-designer-backend is vulnerable to XML external entity XXE attacks. The application does not parse XML documents properly, allowing a malicious user to conduct a XML external entity attack...

Apache OpenOffice DOC File Parsing Remote Code Execution Vulnerability

Apache OpenOffice is open and free word processing software. The OpenOffice Writer DOC file parser and WW8Fonts constructor handles DOC file vulnerabilities, allowing remote attackers to exploit the vulnerability by submitting a special file and tricking the user into parsing it, which can crash...

Iceni Infix PDF Parsing SetSize Code Execution Vulnerability

Iceni Technlology Infix is a PDF format document editing tool from the British company Iceni Technlology. The tool has text editing, spell checking, find and replace and other functions. A security vulnerability exists in the PDF parsing feature of Iceni Technlology Infix version 7.1.5. The...

Updated java-1.8.0-openjdk packages fix security vulnerability

An untrusted library search path flaw was found in the JCE component of OpenJDK. A local attacker could possibly use this flaw to cause a Java application using JCE to load an attacker-controlled library and hence escalate their privileges CVE-2017-3511. It was found that the JAXP component of...

PT-2017-9754 · Nitro · Nitro Pro

Name of the Vulnerable Software and Affected Versions: Nitro Pro version 10 Description: A potential remote code execution issue exists in the PDF parsing functionality. A specially crafted PDF file can cause this issue, resulting in potential code execution. An attacker can send the victim a...