Adobe Acrobat Reader Font gvar TupleVariation Data Out-Of-Bounds Read Vulnerability

Talos Vulnerability Report TALOS-2024-2002 Adobe Acrobat Reader Font gvar TupleVariation Data Out-Of-Bounds Read Vulnerability August 13, 2024 CVE Number CVE-2024-41832 SUMMARY An out-of-bounds read vulnerability exists in CoolType, a font processing framework used by Adobe Acrobat Reader...

CVE-2023-7066

The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process...

CVE-2024-43152

CVE-2024-43152 is a stored XSS in the iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery WordPress plugin. Root cause: Improper input neutralization during web page generation. Affected: 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery (versions from n/a to 1.15.6). Pu...

CVE-2023-7066

CVE-2023-7066 is associated with an out-of-bounds read while parsing specially crafted PDF data. Connected documents identify the APDFL library as affected (with no specific affected versions or fix details provided), and reiterate that exploitation could allow code execution in the attacker’s co...

CVE-2023-7066 Siemens Teamcenter Visualization and JT2Go Out-of-bounds Read

The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process...

CVE-2023-7066 Siemens Teamcenter Visualization and JT2Go Out-of-bounds Read

The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process...

CVE-2024-7414

The PDF Builder for WPForms plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.2.116. This is due to the plugin allowing direct access to the composer-setup.php file which has displayerrors on. This makes it possible for unauthenticated attackers to...

The vulnerability of the bmp_decompress_rle4() function in the MuPDF PDF viewer software, which allows a hacker to trigger a service failure.

The vulnerability of the bmpdecompressrle4 function in the MuPDF PDF viewer software is related to division by zero. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the pnm_binary_read_image() function in the MuPDF PDF viewer software, which allows a hacker to cause a service failure.

The vulnerability of the pnmbinaryreadimage function in the MuPDF PDF viewer software is related to division by zero. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

WordPress plugin PDF Builder for WPForms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security...

PT-2024-6131 · Sap · Sap Bex Web Java Runtime Export Web Service

Name of the Vulnerable Software and Affected Versions: SAP BEx Web Java Runtime Export Web Service affected versions not specified Description: The issue is related to insufficient validation of an XML document accepted from an untrusted source in the SAP BEx Web Java Runtime Export Web Service...

OESA-2024-1966 qpdf security update

QPDF is a command-line program that does structural, content-preserving transformations on PDF files. It could have been called something like pdf-to-pdf. It also provides many useful capabilities to developers of PDF-producing software or for people who just want to look at the innards of a PDF...

CVE-2024-7414 PDF Builder for WPForms <= 1.2.116 - Unauthenticated Full Path Disclosure

The PDF Builder for WPForms plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.2.116. This is due to the plugin allowing direct access to the composer-setup.php file which has displayerrors on. This makes it possible for unauthenticated attackers to...

CVE-2024-7414 PDF Builder for WPForms <= 1.2.116 - Unauthenticated Full Path Disclosure

The PDF Builder for WPForms plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.2.116. This is due to the plugin allowing direct access to the composer-setup.php file which has displayerrors on. This makes it possible for unauthenticated attackers to...

CVE-2024-7414

CVE-2024-7414 affects the PDF Builder for WPForms WordPress plugin. It allows Full Path Disclosure in all versions up to 1.2.116 via direct access to composer-setup.php (display_errors enabled), letting unauthenticated users retrieve the web app’s full path. This information can aid other attacks...

PT-2024-38330 · WordPress · Pdf Builder For Wpforms

Name of the Vulnerable Software and Affected Versions: PDF Builder for WPForms plugin for WordPress versions up to, and including, 1.2.116 Description: The issue is related to Full Path Disclosure, which occurs because the plugin allows direct access to the composer-setup.php file with display...

PT-2024-40835 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a negative-size-param, which occurs in the pdf resize resource arrays function, called by process cmap text and...

ROS-20240807-04

MuPDF PDF viewer's fznewpixmapfromfloatdata function vulnerability is related to the division by zero. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service Vulnerability in bmpdecompressrle4 function of MuPDF PDF viewer is related to division by...

WordPress 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery Plugin <= 1.15.6 is vulnerable to Cross Site Scripting (XSS)

Software 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery Type Plugin Vulnerable versions = 1.15.6 Fixed in 1.15.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43152 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID c27b38c9e4e0...

Fedora: Security Advisory (FEDORA-2024-053b8330a1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...