CVE-2016-0278

The CVE-2016-0278 entry relates to IBM Domino’s KeyView PDF Filter, where a heap-based buffer overflow in the filter can be triggered by a crafted PDF, leading to remote arbitrary code execution. Affected products/versions include IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6. T...

CVE-2016-0279

CVE-2016-0279 is a heap-based buffer overflow in IBM Domino’s KeyView PDF filter. Affected: IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6. Trigger: crafted PDF documents parsed by the KeyView filter (Font/BaseFont handling in CPDFProcEncoding); leads to remote arbitrary code exe...

CVE-2016-0278

Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277, CVE-2016-0279, and CVE-2016-0301...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the core/fxge/ge/fxgetext.cpp file of the Google Chrome browser’s PDFium component is related to the improper handling of certain index values. Exploiting this vulnerability can allow an attacker to trigger a service failure memory overflow during reading using a specially...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the opjj2kreadSPCodSPCoc function in the j2k.c module of the OpenJPEG module for the PDFium browser in Google Chrome is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause service interruptions or other effects...

Information disclosure

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka "Windows PDF Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3201...

Microsoft Windows PDF Library Information Disclosure (MS16-080: CVE-2016-3201)

An out of bound memory access vulnerability was discovered within Microsoft Edge PDF reader and Windows PDF Library. The vulnerability is due to an error in parsing a malformed PDF document. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted PDF file...

CVE-2016-1686

The CPDFDIBSource::CreateDecoder function in core/fpdfapi/fpdfrender/fpdfrenderloadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles decoder-initialization failure, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...

CVE-2016-1685

core/fxge/ge/fxgetext.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...

CVE-2016-1686

The CPDFDIBSource::CreateDecoder function in core/fpdfapi/fpdfrender/fpdfrenderloadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles decoder-initialization failure, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...

UBUNTU-CVE-2016-1681

Heap-based buffer overflow in the opjj2kreadSPCodSPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...

CVE-2016-1686

Removed by vendor...

CVE-2016-1685

core/fxge/ge/fxgetext.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...

chromium-browser: out-of-bounds read in pdfium

core/fxge/ge/fxgetext.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...

KLA10816 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, obtain sensitive information or conduct another unknown impact. Below is a complete list of vulnerabilities: 1. Multiple...

CVE-2015-8868

Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service memory corruption and crash or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF...

CVE-2015-8868

Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service memory corruption and crash or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF...

Heap overflow

Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service memory corruption and crash or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF...

CVE-2015-8868

Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service memory corruption and crash or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF...

CVE-2015-8868

CVE-2015-8868 affects Poppler up to version 0.40.0, where a heap-based buffer overflow in ExponentialFunction::ExponentialFunction can be triggered by a crafted PDF ExtGState dictionary, leading to memory corruption, a crash, or potentially arbitrary code execution. Mitigation: upgrade Poppler to...