6 matches found
Adobe Acrobat Reader Javascript event.richValue use-after-free vulnerability
Summary A use-after-free vulnerability exists in the way certain events are handled in Adobe Acrobat Reader 21.007.20091. A specially-crafted javascript code can exploit a use-after-free vulnerability which can lead to arbitrary code execution. User would need to open a malicious file to trigger...
Adobe Reader 'printSeps()' Function Heap Corruption Vulnerability - Linux
Adobe Reader is prone to a heap corruption vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...
Adobe Acrobat and Reader 'printSeps()' Function Heap Corruption Vulnerability
This host is installed with Adobe Reader/Acrobat and is prone to heap corruption Vulnerability OpenVAS Vulnerability Test $Id: gbadobeprdtsprintsepsmemcrptnvulnwin.nasl 6475 2017-06-29 06:35:11Z cfischer $ Adobe Acrobat and Reader 'printSeps' Function Heap Corruption Vulnerability Authors: Antu...
Memory corruption
The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF document that triggers memory corruption,...
Adobe Acrobat < 8.1.2 / 7.1.0 Multiple Vulnerabilities
The version of Adobe Acrobat installed on the remote host is earlier than 8.1.2 or 7.1.0. Such versions are reportedly affected by multiple vulnerabilities : - A design error vulnerability may allow an attacker to gain control of a user's printer. - Multiple stack-based buffer overflows may allow...
Code injection
Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file that calls an insecure JavaScript method in the EScript.api plug-in. NOTE: this issue might be subsumed by CVE-2008-0655...