CVE-2020-8155

An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF...

PT-2018-16359 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 9.2.0.9297 Description: A use-after-free issue in the JavaScript engine of Foxit PDF Reader can be triggered by a specially crafted PDF document, leading to arbitrary code execution. This can occur when a user is...

poppler: Integer overflow in JBIG2Stream.cc

An integer overflow leading to heap-based buffer overflow was found in the poppler library. An attacker could create a malicious PDF file that would cause applications that use poppler such as Evince to crash, or potentially execute arbitrary code when opened...

Adobe Acrobat/Reader Memory Corruption Vulnerability (CNVD-2017-25778)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory corruption vulnerability exists in Adobe Reader/Acrobat. Allowing an attacker to construct a malicious PDF file and trick the user into parsing it could crash the application or execute arbitrary code...

Iceni Argus Heap Buffer Overflow Vulnerability

Iceni Argus is the British Iceni company's set of PDF document type conversion tool. Iceni Argus processing special PDF files there are heap buffer overflow vulnerabilities, allowing attackers can exploit the vulnerability to build malicious PDF files, inducing the user to parse, can make the...

Adobe Reader and Acrobat Memory Misreference Vulnerability (CNVD-2016-00270)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents exist after the use of the use of vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user ...

Adobe Reader and Acrobat Memory Misreference Vulnerability (CNVD-2016-00269)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents exist after the use of the use of vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user ...

Google Chrome PDF File URL Forgery Vulnerability

Google Chrome is an open source WEB browser. Google Chrome processing PDF documents have security vulnerabilities that allow attackers to build malicious WEB pages, inducing users to parse them, and can spoof URLs for spoofing attacks...

Apple TV and iOS PDF Handling Integer Overflow Vulnerability

Apple iOS is the latest operating system for Apple's iPhone and iPod touch devices. Apple TV is Apple's way of allowing photos, videos and music from PCs and iPods to be transmitted wirelessly to a TV in high definition. Apple TV and iOS handle PDF files with an integer overflow vulnerability,...

New Attacks Leverage Adobe Sandbox Bypass Against Uyghur Activists

Attackers with a control infrastructure based in China are leveraging the same vulnerability exploited by Miniduke to attack Uyghur and Tibetan activists with new exploits. Researchers at Kaspersky Lab and AlienVault discovered a spear phishing campaign targeting non-governmental activists with P...

Adobe Recommends Protected View as Temporary Zero Day Mitigation

Adobe released an advisory yesterday suggesting a manual mitigation for zero-day vulnerabilities in its Reader and Acrobat products that are being actively exploited in the wild. The exploit is the first sandbox escape in Adobe Reader X and above. FireEye, which reported the vulnerability to Adob...

New Mac Malware Variants Found in Trojaned Apps Are Stealing Data

Researchers have discovered a series of variants of the DevilRobber Mac OS X Trojan that have a menu of different capabilities, depending upon the strain, and can not only mine Bitcoins using the infected machine’s processing power, but also steals files, installs a Web proxy and may steal the...

Assessing the Adobe Reader X Sandbox

Over the past few years, malicious PDFs have become common place and a prefered vector for attackers. Last week, Adobe announced the release of Reader X – the much anticipated next major release of their ubiquitous document reader, which includes a new security feature called ”Protected Mode”...

PDF Malware Using New Attack Technique

A fresh batch of malicious PDFs is making the rounds via email, with the attackers trying to trick users into opening the files by making them look like instructions for an update to their email accounts. The difference this time, however, is that the attack uses a technique recently published by...