The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to privilege management errors, allowing an attacker to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 are related to privilege management errors. Exploiting these vulnerabilities can all...

The vulnerability of the /Pattern component of the Nitro Pro application for reading and editing PDF files, which allows a hacker to execute arbitrary code.

The vulnerability of the Nitro Pro PDF reading and editing application’s /Pattern component is related to a numerical overflow in the memory buffer. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted PDF file...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to privilege management errors, allowing an attacker to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 are related to privilege management errors. Exploiting these vulnerabilities can all...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 is related to the use of memory after it is freed. Exploiting this vulnerability allow...

CVE-2020-9816

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution...

The vulnerability of the SplashOutputDev::tilingPatternFill function (SplashOutputDev.cc), a library for displaying PDF files in Poppler, allows a hacker to trigger a service failure.

The vulnerability of the SplashOutputDev::tilingPatternFill function SplashOutputDev.cc, which is part of the Poppler PDF rendering library, is related to division by zero errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Buffer Overflow Vulnerability in FontParser Component of Multiple Apple Products

Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers.FontParser is one of the font parsing components. A security vulnerability exists in the FontParser component of several Apple products. An attacker could exploit this vulnerability by means of a malicious...

CVE-2020-8155

An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF...

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2020-31703)

Kingsoft PDF Reader is a PDF reading tool. A denial of service vulnerability exists in Kingsoft PDF Reader. An attacker can exploit this vulnerability to cause a denial of service...

The vulnerability of the built-in PDF converter in the Ghostscript software, which is used for processing, transforming, and generating documents, allows a hacker to trigger a system failure.

The vulnerability of the embedded PDF converter in the Ghostscript software for document processing, conversion, and generation is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially crafted PostScript...

CVE-2020-10901

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-10902

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-10897

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-10898

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

The vulnerability of Google Chrome, related to improper control of access to critical resources, allows a violator to gain unauthorized access to information.

The vulnerability of Google Chrome relates to improper control of access to a critical resource. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to information through a specially created PDF file...

evince, poppler security update

CentOS Errata and Security Advisory CESA-2020:1074 An update for poppler and evince is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detaile...

Extreme PDF Reader suffers from a memory corruption vulnerability (CNVD-2020-25780)

Extreme PDF Reader is a simple, small, efficient and effective PDF reader developed by Beijing Haiteng Times Technology Co. Extreme PDF Reader has a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the copying of buffers without checking the size of the input data. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the copying of buffers without checking the size of the input data. Exploiting these vulnerabilities can allow an attacker to...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to writing beyond the buffer in memory. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to writing beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow an attacker to execute...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execute arbitrary...