CVE-2016-10187: Undefined Security Weakness

The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...

Foxit Reader ePub Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ePub...

Foxit Reader ePub Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ePub...

Foxit Reader < 8.2.1 Multiple Vulnerabilities

Binary data 9985.prm...

Adobe Digital Editions Epub XXE Information Disclosure (CVE-2016-7889)

An XML external entity processing vulnerability exists in the XML parsing component of Adobe Digital Editions. The vulnerability is due to a lack of validation on user-supplied input when parsing the XML in Epub documents. A remote attacker could exploit this vulnerability by enticing a user to...

CVE-2016-7666

An issue was discovered in certain Apple products. Transporter before 1.9.2 is affected. The issue involves the "iTMSTransporter" component, which allows attackers to obtain sensitive information via a crafted EPUB...

CVE-2016-7666

An issue was discovered in certain Apple products. Transporter before 1.9.2 is affected. The issue involves the "iTMSTransporter" component, which allows attackers to obtain sensitive information via a crafted EPUB...

Design/Logic Flaw

An issue was discovered in certain Apple products. Transporter before 1.9.2 is affected. The issue involves the "iTMSTransporter" component, which allows attackers to obtain sensitive information via a crafted EPUB...

CVE-2016-7666

CVE-2016-7666 affects Apple Transporter/iTMSTransporter in Apple products prior to Transporter 1.9.2. The issue arises from parsing a crafted EPUB, causing an information disclosure of user data. Impact is information disclosure (no integrity/availability impact reported); exploitation context is...

CVE-2016-7666

An issue was discovered in certain Apple products. Transporter before 1.9.2 is affected. The issue involves the "iTMSTransporter" component, which allows attackers to obtain sensitive information via a crafted EPUB...

CVE-2016-7666: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. Transporter before 1.9.2 is affected. The issue involves the "iTMSTransporter" component, which allows attackers to obtain sensitive information via a crafted EPUB...

PT-2017-9235

Name of the Vulnerable Software and Affected Versions Transporter versions prior to 1.9.2 Description The issue involves the iTMSTransporter component, which allows attackers to obtain sensitive information via a crafted EPUB. Recommendations For Transporter versions prior to 1.9.2, update to...

PT-2017-7793

Name of the Vulnerable Software and Affected Versions calibre versions prior to 2.75 ALT Linux affected versions not specified Description The issue allows remote attackers to read arbitrary files via a crafted epub file with JavaScript. There is also a mention of a vulnerability in the ALT Linux...

openSUSE Security Update : mupdf (openSUSE-2017-197)

This update for mupdf to version 1.10a fixes the following issues : These security issues were fixed : - CVE-2016-10132: NULL pointer dereference in regexp because of a missing check after allocating memory allowing for DoS bsc1019877. - CVE-2016-10133: Heap buffer overflow write in jsstackoverfl...

About the security content of Transporter 1.9.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

About the security content of Transporter 1.9.2

About the security content of Transporter 1.9.2 This document describes the security content of Transporter 1.9.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...

Adobe Digital Editions ePub Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Digital Editions. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

file security, bug fix, and enhancement update

5.04-30 - fix CVE-2014-3538 unrestricted regular expression matching 5.04-29 - fix 1284826 - try to read ELF header to detect corrupted one 5.04-28 - fix 1263987 - fix bugs found by coverity in the patch 5.04-27 - fix CVE-2014-3587 incomplete fix for CVE-2012-1571 - fix CVE-2014-3710 out-of-bound...

ePUB EBook Reader Skoob - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ePUB EBook Reader Skoob published at the 'play' market has multiple vulnerabilities...

Free Epub - eBook Reader - GPL license, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Free Epub - eBook Reader published at the 'play' market has multiple vulnerabilities...