4743 matches found
Design/Logic Flaw
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine. The...
Design/Logic Flaw
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine. The...
Design/Logic Flaw
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs because of a computation that reads data that is past the end of the targ...
Null pointer dereference
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference in the JavaScript engine. In this scenario, t...
Design/Logic Flaw
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine API. T...
CVE-2017-16398
CVE-2017-16398 is listed among multiple vulnerabilities affecting Adobe Acrobat/Reader products across Windows, Mac, and DC tracks (APSB17-36 family). The OpenVAS entries reference the same CVE alongside numerous others and map to various Adobe product editions (Classic/Continuous/DC). The availa...
CVE-2017-16420
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the...
CVE-2017-16389
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine. The...
CVE-2017-16389
Technical details for CVE-2017-16389 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2017-16371
CVE-2017-16371 describes an untrusted pointer dereference in the JavaScript engine of Adobe Acrobat/Reader (versions listed in the bulletin) that can cause dereferenced pointers to memory locations outside the relevant process address space. The result is a read operation leading to potential exp...
CVE-2017-16393
Adobe Acrobat and Reader are affected by CVE-2017-16393 in versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier. It is a use-after-free vulnerability in the JavaScript engine caused by a mismatch between an old and a new object, enab...
CVE-2017-16398
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine. The...
chromium-browser: type confusion in webassembly
Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Arbitrary Code Execution
Overview math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution. Recommendation Update to version 3.17.0 or later. References -...
Math.js JavaScript Engine Arbitrary Code Execution Vulnerability
Math.js is a math library for JavaScript and Node.js , it supports symbolic computation , a large number of built-in functions and constants . JavaScript engine is one of the JavaScript engine . An arbitrary code execution vulnerability exists in the JavaScript engine in versions of Math.js prior...
Typed-function JavaScript Engine Arbitrary Code Execution Vulnerability
typed-function is a tool for detecting errors in JavaScript functions. JavaScript engine is one of the JavaScript engines. An arbitrary code execution vulnerability exists in JavaScript engine in versions of typed-function prior to 0.10.6. An attacker can exploit this vulnerability to execute...
Design/Logic Flaw
math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution...
Design/Logic Flaw
typed-function before 0.10.6 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution...
