Heap Overflow Vulnerability in DocuCom PDF Reader of Beijing Zhenan Xinyu Technology Co. Ltd (CNVD-2021-46711)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. Ltd. A heap overflow vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

Heap Overflow Vulnerability in DocuCom PDF Reader of Beijing Zhenan Xinyu Technology Co. Ltd (CNVD-2021-46709)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. Ltd. A heap overflow vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

Memory Corruption Vulnerability in Blue Mountain PDF Reader

Blue Mountain PDF Reader is Shanghai Blue Mountain Office Software Co., Ltd. developed a highly efficient PDF reader, including PDF reading, merging, conversion, adding watermarks and other functions. Blue Hill PDF Reader memory corruption vulnerability, attackers can use the vulnerability caused...

SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2021:14609-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14609-1 advisory. - When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have...

CVE-2021-21822

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening a...

CVE-2021-21822

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening a...

CVE-2021-21822

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening a...

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening a...

CVE-2021-21822

CVE-2021-21822 is a use-after-free in Foxit Software’s PDF Reader JavaScript engine (notably around Foxit Reader/PhantomPDF, versions including 10.1.3.37598). A specially crafted PDF can reuse freed memory, enabling arbitrary code execution when the user opens a malicious file or site with the br...

EUVD-2021-8993

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening a...

CVE-2021-21822

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening a...

Vulnerability Spotlight: Use-after-free vulnerability in Foxit PDF Reader

Aleksandar Nikolic of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered a use-after-free vulnerability in the Foxit PDF Reader. Foxit PDF Reader is one of the most popular PDF document readers currently available. As a complete... This is only the...

Foxit Reader FileAttachment annotation use-after-free vulnerability

Summary A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into openi...

Memory Corruption Vulnerability in Foxit PDF Reader (CNVD-2021-30545)

Foxit reader is Foxit Software Development Corporation's pdf reader products. Foxit PDF Reader has a memory corruption vulnerability that can be exploited by attackers to cause denial of service attacks...

Memory Corruption Vulnerability in Foxit PDF Reader

Foxit PDF Reader is Foxit Software Development Corporation's pdf reader products. Foxit PDF Reader has a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Binary Vulnerability in Blue Mountain PDF Reader

Blue Mountain PDF Reader is a PDF reader. Blue Mountain PDF Reader has a binary vulnerability that can be exploited by attackers to cause a denial of service...

Binary Vulnerability in Blue Mountain PDF Reader (CNVD-2021-22940)

Blue Mountain PDF Reader is a PDF reader. Blue Mountain PDF Reader has a binary vulnerability that can be exploited by attackers to gain server control privileges...

Design/Logic Flaw

If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data. This vulnerability affects Firefox 85, Thunderbird 78.7, and Firefox ESR 78.7...

CVE-2021-23953

If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data. This vulnerability affects Firefox 85, Thunderbird 78.7, and Firefox ESR 78.7...

CVE-2021-23953

CVE-2021-23953 concerns an information-disclosure vulnerability in the PDF handling of Mozilla Firefox (before 85.0) and Thunderbird (before 78.7), plus Firefox ESR before 78.7. The issue arises when a user opens a specially crafted PDF, which could leak cross-origin data served as chunked data. ...