Authorization Bypass

Artifex Ghostscript is vulnerable to authorization bypass. This exists in the psi/zfjbig2.c file which allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion...

ghostscript: access bypass in psi/zfjbig2.c (700168)

psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion...

CVE-2018-19477

psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion...

ALPINE-CVE-2018-19477

psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion...

CVE-2018-19477

psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion...

DEBIAN-CVE-2018-19477

psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion...

CVE-2018-19477

CVE-2018-19477 relates to Artifex Ghostscript prior to 9.26, where a JBIG2Decode type confusion in psi/zfjbig2.c allows remote attackers to bypass access restrictions by sending specially crafted input. Public disclosures in multiple sources (e.g., Debian/Red Hat advisories, IBM PowerKVM bulletin...

CVE-2018-19477

psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion...

CVE-2018-19477

psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion...

CVE-2018-19477

psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion...

UBUNTU-CVE-2018-19477

psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion...

Oracle Outside In PDF 8.5.2 - Parsing Memory Corruption (2)

Oracle Outside In PDF 8.5.2 - Parsing Memory Corruption 2 Application: Oracle Outside In Platforms: Windows Versions: 8.5.2 CVE: CVE-2015-4878 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction...

Oracle Outside In PDF 8.5.2 - Parsing Memory Corruption (2)

Application: Oracle Outside In Platforms: Windows Versions: 8.5.2 CVE: CVE-2015-4878 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== Oracle Outside In Technology provides software...

Adobe - JBIG2Decode Memory Corruption Exploit

No description provided by source. $Id: adobejbig2decode.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Adobe - JBIG2Decode Memory Corruption (Metasploit) (2)

$Id: adobejbig2decode.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Adobe PDF exploit code analysis

Websense researcher Hermes Li has posted a blow-by-blow walkthrough with screenshots of the Adobe Acrobat/Reader vulnerability that’s currently under attack. Excerpt from the blog post: “This vulnerability is different than the one found at the end of last year Exploit Action with PDF OpenAction ...

New pdf 0day here-vulnerability warning-the black bar safety net

Source: alert7 Below this is old. http://insecureweb.com/%20/newish-web-based-pdf-attack-in-the-wild-with-real-exploit-code/ New pdf 0day here http://vrt-sourcefire.blogspot.com/2009/02/have-nice-weekend-pdf-love.html Maybe you read Michael Howard's twitter feed. If so, you may be wondering why y...