Lucene search
+L

18 matches found

CNVD
CNVD
•added 2021/11/11 12:00 a.m.•46 views

pdftoxml heap buffer overflow vulnerability (CNVD-2021-89050)

pdftoxml is an open source PDF to XML converter. pdftoxml version 2.0 of the TextPage::dump function has a heap buffer overflow vulnerability. There is no detailed vulnerability details provided...

9.8CVSS2.6AI score0.02131EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/11/10 12:00 a.m.•11 views

Pdf2xml 缓冲区错误漏洞

pdftoxml is an open source PDF to XML converter. pdftoxml version 2.0 of the TextPage::addAttributsNode function has a heap buffer overflow vulnerability. No detailed vulnerability details are currently available...

9.8CVSS5.9AI score0.02131EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/11/10 12:00 a.m.•18 views

pdf2xml 缓冲区错误漏洞

pdftoxml is an open source PDF to XML converter. pdftoxml version 2.0 has a stack buffer overflow vulnerability in the getObjectStream component. No detailed vulnerability details are available at this time...

9.8CVSS5.9AI score0.01762EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/11/10 12:00 a.m.•14 views

Pdf2xml 缓冲区错误漏洞

pdftoxml is an open source PDF to XML converter. pdftoxml version 2.0 of the TextPage::dump function has a heap buffer overflow vulnerability. There is no detailed vulnerability details provided...

9.8CVSS5.9AI score0.02131EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/07/21 12:00 a.m.•21 views

PDF2JSON 资源管理错误漏洞

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages to JSON and XML formats on a page-by-page basis. PDF2JSON Gfx::doShowText has a security vulnerability. An attacker could exploit this vulnerability to cause a denial of service...

5.5CVSS5.7AI score0.00666EPSS
SaveExploits1References2
Prion
Prion
•added 2017/02/28 3:59 p.m.•29 views

Heap overflow

An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicitly trust an index within the specific font object and use it to write the font's name to a single object within an array of objects...

9.3CVSS7.2AI score0.01867EPSS
SaveExploits2References2Affected Software1
Prion
Prion
•added 2017/02/28 3:59 p.m.•26 views

Integer overflow

An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will attempt to convert each character from a font into a polygon and then attempt to rasterize these shapes. As the application attempts to iterate through the rows and...

9.3CVSS7.6AI score0.02116EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2017/02/28 3:00 p.m.•38 views

CVE-2016-8389

An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will attempt to convert each character from a font into a polygon and then attempt to rasterize these shapes. As the application attempts to iterate through the rows and...

8.8CVSS7.8AI score0.02116EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/28 12:00 a.m.•4 views

CVE-2016-8389: Integer Overflow or Wraparound

An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will attempt to convert each character from a font into a polygon and then attempt to rasterize these shapes. As the application attempts to iterate through the rows and...

9.3CVSS6.3AI score0.02116EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2017/02/28 12:00 a.m.•17 views

PT-2017-9654 · Iceni · Iceni Argus

Name of the Vulnerable Software and Affected Versions: Iceni Argus affected versions not specified Description: An exploitable arbitrary heap-overwrite issue exists when Iceni Argus attempts to convert a malformed PDF to XML. It explicitly trusts an index within the specific font object and uses ...

9.3CVSS8.1AI score0.01867EPSS
SaveExploits2References4
OSV
OSV
•added 2017/02/27 9:59 p.m.•10 views

CVE-2016-8386

An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the tool will attempt to use a size out of the font to search through a linked list of buffers to return. Due to a signedness issue, a buffer smaller than the...

7.8CVSS6.4AI score0.0225EPSS
SaveExploits2References2
NVD
NVD
•added 2017/02/27 9:59 p.m.•28 views

CVE-2016-8386

An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the tool will attempt to use a size out of the font to search through a linked list of buffers to return. Due to a signedness issue, a buffer smaller than the...

9.3CVSS8.3AI score0.0225EPSS
SaveExploits2References2
NVD
NVD
•added 2017/02/27 9:59 p.m.•29 views

CVE-2016-8385

An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF to XML a stack variable will be left uninitialized which will later be used to fetch a length that is used in a copy operation. In mo...

9.3CVSS8.3AI score0.0225EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2017/02/27 9:00 p.m.•46 views

CVE-2016-8385

An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF to XML a stack variable will be left uninitialized which will later be used to fetch a length that is used in a copy operation. In mo...

8.8CVSS8AI score0.0225EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2017/02/27 9:00 p.m.•33 views

CVE-2016-8386

An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the tool will attempt to use a size out of the font to search through a linked list of buffers to return. Due to a signedness issue, a buffer smaller than the...

8.8CVSS8AI score0.0225EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2017/02/27 12:00 a.m.•16 views

PT-2017-9651 · Iceni · Iceni Argus

Name of the Vulnerable Software and Affected Versions: Iceni Argus affected versions not specified Description: The issue is related to an uninitialized variable vulnerability that leads to a stack-based buffer overflow. This occurs when Iceni Argus attempts to convert a malformed PDF to XML,...

9.3CVSS8.3AI score0.0225EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/27 12:00 a.m.•6 views

CVE-2016-8385: Out-of-bounds Write

An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF to XML a stack variable will be left uninitialized which will later be used to fetch a length that is used in a copy operation. In mo...

9.3CVSS6.5AI score0.0225EPSS
SaveExploits2References2
Talos
Talos
•added 2017/02/27 12:00 a.m.•58 views

Iceni Argus PDF Font-Encoding GlyphMap Adjustment Code Execution Vulnerability

Summary An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicitly trust an index within the specific font object and use it to write the font’s name to a single object within an array of objects. Due to ...

9.3CVSS8AI score0.01867EPSS
SaveExploits2
Rows per page
Query Builder