Debian: Security Advisory (DSA-4097-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Iceni Argus PDF Font-Encoding GlyphMap Adjustment Code Execution Vulnerability(CVE-2016-8388)

Summary An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicitly trust an index within the specific font object and use it to write the font's name to a single object within an array of objects. Due to ...

MGASA-2017-0276 Updated poppler packages fix security vulnerabilities

Jiaqi Peng discovered that the poppler pdfunite tool incorrectly parsed certain malformed PDF documents. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause poppler to crash, resulting in a denial of service CVE-2017-7511. It was discovered that the...

CVE-2017-7698

A Use After Free in the pdf2swf part of swftools 0.9.2 and earlier allows remote attackers to execute arbitrary code via a malformed PDF document, possibly a consequence of an error in Gfx.cc in Xpdf 3.02...

Design/Logic Flaw

A Use After Free in the pdf2swf part of swftools 0.9.2 and earlier allows remote attackers to execute arbitrary code via a malformed PDF document, possibly a consequence of an error in Gfx.cc in Xpdf 3.02...

PT-2017-9651 · Iceni · Iceni Argus

Name of the Vulnerable Software and Affected Versions: Iceni Argus affected versions not specified Description: The issue is related to an uninitialized variable vulnerability that leads to a stack-based buffer overflow. This occurs when Iceni Argus attempts to convert a malformed PDF to XML,...

Ubuntu 14.04 LTS : poppler vulnerabilities (USN-2958-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2958-1 advisory. It was discovered that the poppler pdfseparate tool incorrectly handled certain filenames. A local attacker could use this issue to cause the tool to...

USN-2958-1 poppler vulnerabilities

It was discovered that the poppler pdfseparate tool incorrectly handled certain filenames. A local attacker could use this issue to cause the tool to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applied to Ubuntu 12.04 LTS. CVE-2013-4473,...

Adobe Acrobat Reader <= 8.1.2 Malformed PDF Remote DoS PoC

No description provided by source. Adobe Acrobat Reader = 8.1.2 Reader Remote Denial Of Service the reader deadly crash when a malformed Pdf file is opened: 00414141 AcroRd32.00414141 greetz to : Deimos, benjilenoob, Berga , http://spiritofhack.net/ Poc : http://exploit-db.com/sploits/2008-HI2.pd...

Debian DSA-2876-1 : cups - security update

Florian Weimer of the Red Hat Product Security Team discovered multiple vulnerabilities in the pdftoopvp CUPS filter, which could result in the execution of aribitrary code if a malformed PDF file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

DSA-2875-1 cups-filters - security update

Bulletin has no description...

Foxit PDF Reader v4.1.1 Title Stack Buffer Overflow

This module exploits a stack buffer overflow in Foxit PDF Reader prior to version 4.2.0.0928. The vulnerability is triggered when opening a malformed PDF file that contains an overly long string in the Title field. This results in overwriting a structured exception handler record. NOTE: This...

CVE-2010-1639

The clipdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause a denial of service crash via a malformed PDF file, related to an inconsistency in the calculated stream length and the real stream length...

CVE-2010-1639

The clipdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause a denial of service crash via a malformed PDF file, related to an inconsistency in the calculated stream length and the real stream length...

acroread: multiple code execution flaws (APSB10-02)

Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a malformed PDF document...

acroread: multiple code execution flaws (APSB10-02)

Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a malformed PDF document...

PT-2010-1309 · Adobe · Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Reader and Acrobat versions 9.x before 9.3 Adobe Reader and Acrobat versions 8.x before 8.2 Adobe Reader and Acrobat versions 7.x before 7.1.4 Description: The issue is related to a problem in the U3D implementation, allowing remote...

CVE-2008-4813

Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that 1 performs unspecified actions on a Collab object that trigger memory corruption, related to a GetCosObj method; or 2 contains a malformed PDF object that...

Adobe Acrobat Reader 8.1.2 - '.PDF' Remote Denial of Service (PoC)

Adobe Acrobat Reader = 8.1.2 Reader Remote Denial Of Service the reader deadly crash when a malformed Pdf file is opened: 00414141 AcroRd32.00414141 greetz to : Deimos, benjilenoob, Berga , http://spiritofhack.net/ Poc :...

Adobe Acrobat Reader <= 8.1.2 Malformed PDF Remote DOS PoC

Exploit for unknown platform in category dos / poc ========================================================== Adobe Acrobat Reader = 8.1.2 Malformed PDF Remote DOS PoC ========================================================== Adobe Acrobat Reader = 8.1.2 Reader Remote Denial Of Service the reade...