CVE-2017-14546

CVE-2017-14546 affects STDU Viewer 1.6.375. A crafted .epub file can cause a denial of service and potentially unspecified impact, related to the error code 0xe06d7363 at wow64!Wow64NotifyDebugger+0x… at local access. The connected documents provide limited technical detail beyond this; no patch/...

CVE-2017-14542

STDU Viewer 1.6.375 contains a buffer overflow vulnerability (per CNVD-2017-30441) that a local attacker can exploit by processing a specially crafted .epub file, potentially leading to arbitrary code execution or a denial of service. The connected CNVD entry confirms the issue in STDU Viewer and...

CVE-2017-14543

CVE-2017-14543 affects STDU Viewer 1.6.375. A crafted .epub can cause a denial of service or possibly other unspecified impact due to Data from Faulting Address controlling Branch Selection at STDUEPubFile!DllUnregisterServer+0x0000000000039335. The connected sources confirm the product/version a...

CVE-2017-14545

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address controls Branch Selection starting at STDUEPubFile!DllUnregisterServer+0x0000000000010332."...

CVE-2017-14545

STDU Viewer 1.6.375 is affected by a vulnerability described across multiple sources as a buffer overflow in EPUB handling. The issue appears to be triggered by processing a specially crafted .epub file, with the root cause tied to memory/branch handling in the STDUEPubFile!DllUnregisterServer+0x...

CVE-2017-14542

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .epub file, related to a "Read Access Violation on Block Data Move starting at STDUEPubFile!DllUnregisterServer+0x0000000000010262."...

Adobe Digital Editions ePub Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Digital Editions. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Adobe Digital Editions ePub JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Digital Editions. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

[SECURITY] Fedora 26 Update: FlightCrew-0.9.1-7.fc26

FlightCrew is a C++ epub validator...

[SECURITY] Fedora 25 Update: FlightCrew-0.9.1-7.fc25

FlightCrew is a C++ epub validator...

[SECURITY] Fedora 24 Update: FlightCrew-0.9.1-7.fc24

FlightCrew is a C++ epub validator...

iBooks information disclosure(CVE-2017-2497)

What's ePub file? EPUB is an e-book file format with the extension .epub that can be downloaded and read on devices like smartphones, tablets, computers, or e-readers. And in technical implementation An EPUB file is a ZIP archive that contains, in effect, a website—including HTML files, images, C...

macOS iBooks Parsing a maliciously crafted iBooks file lead to local file disclosure（CVE-2017-2426）

On a previous post about ePub parsers This book reads you - exploiting services and readers that support the ePub book format, I mentioned using scripting capabilities in ePub to perform local attacks against users. Apple just released a fix for one issue I reported last year in iBooks that allow...

CVE-2016-10187

The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...

Code injection

The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...

CVE-2016-10187

The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...

CVE-2016-10187

The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...

UBUNTU-CVE-2016-10187

The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...

DEBIAN-CVE-2016-10187

The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...

CVE-2016-10187

CVE-2016-10187 affects the calibre E-book viewer prior to 2.75. A crafted EPUB containing JavaScript can cause the viewer to read arbitrary files on the user’s system. Impact: partial confidentiality exposure; no integrity/availability impact stated. Exploitation requires a user to open a malicio...