SUSE CVE-2021-21897

A code execution vulnerability exists in the DLDxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

SUSE CVE-2021-39523

An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function checkPOLYLINEhandles located in decode.c. It allows an attacker to cause Denial of Service...

libredwg 代码问题漏洞

LibreDWG is a free C library for reading and writing DWG files. a null pointer dereference vulnerability exists in the checkPOLYLINEhandles function in decode.c in LibreDWG version 0.10.1.3751. An attacker could exploit this vulnerability to cause a denial of service...

GNU LibreDWG Resource Management Error Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A resource management error vulnerability exists in the 'dwgencodeLWPOLYLINE' function of the dwg.spec file in GNU LibreDWG version 0.9.3 and earlier. The vulnerability stems from mismanagement of system resources e.g., memory,...

CVE-2018-14305

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-14305

CVE-2018-14305 affects Foxit Reader (notably 9.0.1.5096) and allows remote code execution via manipulation of PolyLine annotations during document processing. The flaw is a use-after-free in the annotation handling, exploitable when a user opens a malicious file or visits a malicious page, with u...

Foxit Reader Memory Misreference Vulnerability (CNVD-2018-14150)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of PolyLine annotations in Foxit Reader 9.1.0.5096 and earlier versions for Windows. A remote attacker can exploit thi...

Foxit Reader PolyLine Annotation addAdLayer Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...