EUVD-2021-8251

Malicious code in bioql PyPI...

EUVD-2021-8250

Malicious code in bioql PyPI...

CVE-2021-20838

Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity XXE attack to cause a denial of service DoS condition by processing a specially crafted XML document...

CVE-2021-20839

Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity XXE attack to cause a denial of service DoS condition to the other servers by processing a specially crafted XML document...

CVE-2021-20839

Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity XXE attack to cause a denial of service DoS condition to the other servers by processing a specially crafted XML document...

CVE-2021-20838

Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity XXE attack to cause a denial of service DoS condition by processing a specially crafted XML document...

CVE-2021-20838: Improper Restriction of XML External Entity Reference

Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity XXE attack to cause a denial of service DoS condition by processing a specially crafted XML document...

PT-2021-14283

Name of the Vulnerable Software and Affected Versions: Office Server Document Converter versions 7.2MR4 and earlier Office Server Document Converter versions 7.1MR7 and earlier Description: The issue allows a remote unauthenticated attacker to conduct an XML External Entity XXE attack. This can...

PT-2021-14282

Name of the Vulnerable Software and Affected Versions: Office Server Document Converter versions 7.2MR4 and earlier Office Server Document Converter versions 7.1MR7 and earlier Description: The issue allows a remote unauthenticated attacker to conduct an XML External Entity XXE attack, causing a...

CVE-2021-20839: Improper Restriction of XML External Entity Reference

Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity XXE attack to cause a denial of service DoS condition to the other servers by processing a specially crafted XML document...

Multiple improper restriction of XML external entity reference (XXE) vulnerabilities in Office Server Document Converter

Overview Office Server Document Converter provided by Antenna House, Inc. contains multiple improper restriction of XML external entity reference XXE vulnerabilities listed below. Improper restriction of XML external entity reference XXE CWE-611 - CVE-2021-20838 Resource exhaustion in the PDF...

JVN#33453839: Multiple improper restriction of XML external entity reference (XXE) vulnerabilities in Office Server Document Converter

Office Server Document Converter provided by Antenna House, Inc. contains multiple improper restriction of XML external entity reference XXE vulnerabilities listed below. Improper restriction of XML external entity reference XXE CWE-611 - CVE-2021-20838 Resource exhaustion in the PDF convert...

Buffer overflow

A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro MR1 7,0,2019,0220. While parsing a document text info container, the TxMasterStyleAtom::parse function is incorrectly checking the bounds corresponding to...

PT-2019-17416

Name of the Vulnerable Software and Affected Versions Rainbow PDF Office Server Document Converter version 7.0 Pro MR1 7,0,2019,0220 Description A buffer overflow issue exists in the PowerPoint document conversion function. The TxMasterStyleAtom::parse function incorrectly checks the bounds...

CVE-2019-5030: Heap-based Buffer Overflow

A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro MR1 7,0,2019,0220. While parsing a document text info container, the TxMasterStyleAtom::parse function is incorrectly checking the bounds corresponding to...

PT-2019-17407

Name of the Vulnerable Software and Affected Versions Rainbow PDF Office Server Document Converter version 7.0 Pro R1 7,0,2018,1113 Description A heap-based overflow issue exists in the PowerPoint document conversion function. The getSummaryInformation function incorrectly checks the correlation...

CVE-2019-5019: Heap-based Buffer Overflow

A heap-based overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro R1 7,0,2018,1113. While parsing Document Summary Property Set stream, the getSummaryInformation function is incorrectly checking the correlation betwe...

Heap overflow

An exploitable heap corruption exists in the PowerPoint document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312. A crafted PowerPoint PPT document can lead to heap corruption, resulting in remote code execution...

CVE-2018-3932

CVE-2018-3932 describes a stack-based buffer overflow in the Microsoft Word document conversion functionality of Antenna House Office Server Document Converter for Linux64 (V6.1 Pro MR2). The vulnerability occurs in the Word DOC->PDF/JPEG conversion path via the putlsttbl/xst processing, where...

CVE-2018-3932

An exploitable stack-based buffer overflow exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312. A crafted Microsoft Word DOC document can lead to a stack-based buffer overflow, resultin...