CVE-2017-9806

A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, allows attackers to craft malicious documents that cause denial of service memory corruption and application crash potentially resulting in arbitrary code execution...

Devilish ONI Attacks in Japan Use Wiper to Cover Tracks

NotPetya has shown the way for attackers who want use ransomware as a cover for a deeper incursion. The latest example is a wave of wiper attacks hitting organizations in Japan for possibly as long as the last nine months. Researchers at Cybereason this week said they had detected targeted attack...

CVE-2017-12608

A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service memory corruption and application crash potentially resulting in arbitrary code execution...

DEBIAN-CVE-2017-14617

In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files...

EPS Processing Zero-Days Exploited by Multiple Threat Actors

In 2015, FireEye published details about two attacks exploiting vulnerabilities in Encapsulated PostScript EPS of Microsoft Office. One was a zero-day and one was patched weeks before the attack launched. Recently, FireEye identified three new zero-day vulnerabilities in Microsoft Office products...

The Word Vulnerability, CVE-2017-0199 dissect that Microsoft patch that you installed? - Vulnerability warning-the black bar safety net

! Foreword Recently, FireEye detects a use of the vulnerability, CVE-2017-0199 malicious OfficeRTF document--earlier this week FreeBuf also reported the vulnerability, without the need to enable Word macros, open a malicious RFT document can be infected with a malicious program. When the user ope...

Iceni Argus Integer Overflow Vulnerability

Iceni Argus is the British Iceni company's set of PDF document type conversion tool. Iceni Argus handles special PDF files with an integer overflow vulnerability that can be exploited by an attacker to build malicious PDF files and trick users into parsing them, which can crash the application...

Iceni Argus Memory Corruption Vulnerability

Iceni Argus is the British Iceni company's set of PDF document type conversion tool. Iceni Argus processing special PDF files have a security vulnerability, allowing attackers can exploit the vulnerability to build malicious PDF files, inducing the user to parse, can make the application crash...

Iceni Argus heap buffer overflow vulnerability (CNVD-2017-02539)

Iceni Argus is the British Iceni company's set of PDF document type conversion tool. Iceni Argus processing special PDF files there are heap buffer overflow vulnerabilities, allowing attackers can exploit the vulnerability to build malicious PDF files, inducing the user to parse, can make the...

Adobe Reader and Acrobat Heap Overflow Code Execution Vulnerability

Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDFs. The Adobe Reader and Acrobat heap overflow code execution vulnerability allows remote attackers to exploit the vulnerability to...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-08952)

Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDFs. A memory corruption vulnerability exists in Adobe Reader and Acrobat, which allows remote attackers to exploit the vulnerabilit...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-08949)

Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDFs. A memory corruption vulnerability exists in Adobe Reader and Acrobat, which allows remote attackers to exploit the vulnerabilit...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-08951)

Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDFs. A memory corruption vulnerability exists in Adobe Reader and Acrobat, which allows remote attackers to exploit the vulnerabilit...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-09444)

Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDFs. A memory corruption vulnerability exists in Adobe Reader and Acrobat, which allows remote attackers to exploit the vulnerabilit...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-08969)

Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDFs. A memory corruption vulnerability exists in Adobe Reader and Acrobat, which allows remote attackers to exploit the vulnerabilit...

Adobe Reader and Acrobat Security Bypass Vulnerability (CNVD-2016-09398)

Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDFs. A security bypass vulnerability exists in Adobe Reader and Acrobat that allows remote attackers to build malicious PDF files th...

Adobe Reader and Acrobat Memory Corruption Code Execution Vulnerability

Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDFs. A memory corruption vulnerability exists in Adobe Reader and Acrobat, which allows remote attackers to exploit the vulnerabilit...

Adobe Reader and Acrobat memory corruption vulnerability (CNVD-2016-09447)

Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDFs. A memory corruption vulnerability exists in Adobe Reader and Acrobat, which allows remote attackers to exploit the vulnerabilit...

Apache OpenOffice -- multiple vulnerabilities

The Apache Openofffice project reports: CVE-2017-3157: Arbitrary file disclosure in Calc and Writer By exploiting the way OpenOffice renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacke...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00267)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...