445 matches found
PT-2017-13519
Name of the Vulnerable Software and Affected Versions STDU Viewer version 1.6.375 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file. This is related to the use of data from a faulting address in a subsequent...
PT-2017-13521
Name of the Vulnerable Software and Affected Versions STDU Viewer version 1.6.375 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file. This is related to an "Error Code 0xe06d7363 starting at...
PT-2017-2686
Name of the Vulnerable Software and Affected Versions Adobe Digital Editions versions 4.5.4 and earlier Description The issue is related to a use after free vulnerability in the program, which could allow a remote attacker to execute arbitrary code. This is due to an exploitable use after free...
Adobe Digital Editions ePub Font Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Digital Editions. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
PT-2017-15642
Name of the Vulnerable Software and Affected Versions Adobe Digital Editions versions 4.5.4 and earlier Description The issue is related to a memory corruption vulnerability that could lead to arbitrary code execution if successfully exploited. It is also described as an out-of-bounds read...
Adobe Digital Editions ePub JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Digital Editions. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...
[SECURITY] Fedora 26 Update: FlightCrew-0.9.1-7.fc26
FlightCrew is a C++ epub validator...
[SECURITY] Fedora 25 Update: FlightCrew-0.9.1-7.fc25
FlightCrew is a C++ epub validator...
[SECURITY] Fedora 24 Update: FlightCrew-0.9.1-7.fc24
FlightCrew is a C++ epub validator...
iBooks information disclosure(CVE-2017-2497)
What's ePub file? EPUB is an e-book file format with the extension .epub that can be downloaded and read on devices like smartphones, tablets, computers, or e-readers. And in technical implementation An EPUB file is a ZIP archive that contains, in effect, a website—including HTML files, images, C...
macOS iBooks Parsing a maliciously crafted iBooks file lead to local file disclosure（CVE-2017-2426）
On a previous post about ePub parsers This book reads you - exploiting services and readers that support the ePub book format, I mentioned using scripting capabilities in ePub to perform local attacks against users. Apple just released a fix for one issue I reported last year in iBooks that allow...
Code injection
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...
CVE-2016-10187
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...
CVE-2016-10187
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...
CVE-2016-10187
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...
DEBIAN-CVE-2016-10187
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...
UBUNTU-CVE-2016-10187
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...
CVE-2016-10187
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...
CVE-2016-10187
CVE-2016-10187 affects the calibre E-book viewer prior to 2.75. A crafted EPUB containing JavaScript can cause the viewer to read arbitrary files on the user’s system. Impact: partial confidentiality exposure; no integrity/availability impact stated. Exploitation requires a user to open a malicio...
