UBUNTU-CVE-2021-30027

mdanalyzeline in md4c.c in md4c 0.4.7 allows attackers to trigger use of uninitialized memory, and cause a denial of service via a malformed Markdown document...

Nitro Pro XRefTable Entry Missing Object Code Execution Vulnerability

Talos Vulnerability Report TALOS-2020-1068 Nitro Pro XRefTable Entry Missing Object Code Execution Vulnerability September 15, 2020 CVE Number CVE-2020-6115 SUMMARY An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitro Pro...

Memory Corruption Vulnerability in iPubsoft PDF to PNG Converter for Windows

iPubsoft PDF to PNG Converter for Windows is a PDF processing tool. A memory corruption vulnerability exists in iPubsoft PDF to PNG Converter for Windows, which can be exploited by attackers to cause the program to crash by constructing malformed PDF files...

Memory Corruption Vulnerability in iPubsoft PDF to Image Converter

iPubsoft PDF to Image Converter is a PDF processing tool. A memory corruption vulnerability exists in iPubsoft PDF to Image Converter, which can be exploited by attackers to crash the program by constructing malformed PDF files...

Memory Corruption Vulnerability in iPubsoft PDF Image Extractor

iPubsoft PDF Image Extractor is a PDF processing tool. A memory corruption vulnerability exists in iPubsoft PDF Image Extractor, which can be exploited by attackers to crash the program by constructing malformed PDF files...

PT-2019-19383 · Daview · Daviewindy

Name of the Vulnerable Software and Affected Versions: DaviewIndy versions 8.98.7 and earlier Description: The issue is triggered when a user opens a malformed PDF file that is mishandled by Daview.exe, leading to an integer overflow. This could allow attackers to exploit the issue and achieve...

CVE-2017-7698

A Use After Free in the pdf2swf part of swftools 0.9.2 and earlier allows remote attackers to execute arbitrary code via a malformed PDF document, possibly a consequence of an error in Gfx.cc in Xpdf 3.02...

CVE-2017-3017

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability when handling a malformed PDF file. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7131

ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly have unspecified other impact via a malformed wddxPacket XML document that is mishandled in a wddxdeserialize call, as...

Microsoft Office 2007 - Malformed Document Stack Buffer Overflow

Microsoft Office 2007 - Malformed Document Stack Buffer Overflow Source: https://code.google.com/p/google-security-research/issues/detail?id=170&can=1 The following access violation was observed in Microsoft Office 2007 Word document: e24.e28: Access violation - code c0000005 first chance First...

Microsoft Office 2007 Malformed Document Stack-Based Buffer Overflow Exploit

Microsoft Office 2007 suffers from a stack-based buffer overflow vulnerability when handling a malformed document. Source: https://code.google.com/p/google-security-research/issues/detail?id=170&can=1 The following access violation was observed in Microsoft Office 2007 Word document: e24.e28:...

Microsoft Office 2007 - Malformed Document Stack Buffer Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=170&can=1 The following access violation was observed in Microsoft Office 2007 Word document: e24.e28: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This...

UBUNTU-CVE-2015-1257

platform/graphics/filters/FEColorMatrix.cpp in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, does not properly handle an insufficient number of values in an feColorMatrix filter, which allows remote attackers to cause a denial of service container overflow or...

Microsoft Word 97/98/2002 Malformed Document Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8761/info It has been reported that Microsoft Word is prone to a vulnerability that may allow an attacker to crash the software. The problem occurs when an attacker modifies the memory structure of a Word document. If a...

DEBIAN-CVE-2010-1639

The clipdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause a denial of service crash via a malformed PDF file, related to an inconsistency in the calculated stream length and the real stream length...

Opera Information Disclosure Vulnerability - (Windows)

The host is installed with Opera Web Browser and is prone to Information Disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodoperainfodiscvulnfeb10win.nasl 5401 2017-02-23 09:46:07Z teissa $ Opera Information Disclosure Vulnerability - Windows Authors: Antu Sanadi Copyright: Copyright...

Opera Information Disclosure Vulnerability - (Linux)

The host is installed with Opera Web Browser and is prone to Information Disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodoperainfodiscvulnfeb10lin.nasl 5401 2017-02-23 09:46:07Z teissa $ Opera Information Disclosure Vulnerability - Linux Authors: Antu Sanadi Copyright: Copyright c...

CVE-2010-0654

Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which...

Microsoft Office Excel PivotTable Cache Record Parsing Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must open a malicious document. The specific flaw exists when parsing a document containing a...

Inside Microsoft's July Security Patch Batch

Microsoft released six security bulletins today — three rated Critical and three rated Important. Two of the issues are being actively exploited on the Internet and four of the issues are client-side vulnerabilities, which means the exploit can only occur if a user visits an evil website or opens...