5647 matches found
CVE-2017-16398
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine. The...
CVE-2017-16389
Technical details for CVE-2017-16389 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2017-16389
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine. The...
CVE-2017-16398
CVE-2017-16398 is listed among multiple vulnerabilities affecting Adobe Acrobat/Reader products across Windows, Mac, and DC tracks (APSB17-36 family). The OpenVAS entries reference the same CVE alongside numerous others and map to various Adobe product editions (Classic/Continuous/DC). The availa...
CVE-2017-16371
CVE-2017-16371 describes an untrusted pointer dereference in the JavaScript engine of Adobe Acrobat/Reader (versions listed in the bulletin) that can cause dereferenced pointers to memory locations outside the relevant process address space. The result is a read operation leading to potential exp...
CVE-2017-16420: Out-of-bounds Read
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the...
CVE-2017-16398: Use After Free
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine. The...
CVE-2017-16390: Use After Free
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine API. T...
CVE-2017-16389: Use After Free
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine. The...
CVE-2017-16370: Out-of-bounds Read
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs because of a computation that reads data that is past the end of the targ...
CVE-2017-16371: Improper Restriction of Operations within the Bounds of a Memory Buffer
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference in the JavaScript engine. In this scenario, t...
CVE-2017-16393: Use After Free
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine. The...
chromium-browser: type confusion in webassembly
Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Arbitrary Code Execution
Overview math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution. Recommendation Update to version 3.17.0 or later. References -...
Typed-function JavaScript Engine Arbitrary Code Execution Vulnerability
typed-function is a tool for detecting errors in JavaScript functions. JavaScript engine is one of the JavaScript engines. An arbitrary code execution vulnerability exists in JavaScript engine in versions of typed-function prior to 0.10.6. An attacker can exploit this vulnerability to execute...
Math.js JavaScript Engine Arbitrary Code Execution Vulnerability
Math.js is a math library for JavaScript and Node.js , it supports symbolic computation , a large number of built-in functions and constants . JavaScript engine is one of the JavaScript engine . An arbitrary code execution vulnerability exists in the JavaScript engine in versions of Math.js prior...
Design/Logic Flaw
math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution...
CVE-2017-1001002
math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution...
Design/Logic Flaw
typed-function before 0.10.6 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution...
