DEBIAN-CVE-2018-0202

clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format .pdf...

PT-2019-4925 · Gnome +4 · Evince +4

Name of the Vulnerable Software and Affected Versions: Evince version 3.26.0 Description: The issue is caused by a buffer overflow in the backend/tiff/tiff-document.c component of the Evince document viewer. This can be exploited by a remote attacker using a specially crafted PDF file, potentiall...

Exempi Denial of Service Vulnerability (CNVD-2018-06683)

Exempi is an open source implementation of XMP based on the Adobe XMP SDK. A security vulnerability exists in versions of Exempi prior to 2.4.3. A remote attacker can exploit this vulnerability to cause a denial of service memory copy invalid memory misreference with the help of a .pdf file with...

UBUNTU-CVE-2018-8101

The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

DEBIAN-CVE-2018-8100

The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a specific pdf file, as demonstrated by pdftohtml...

UBUNTU-CVE-2018-8103

The JBIG2Stream::readGenericBitmap function in JBIG2Stream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

chromium-browser: integer overflow in pdfium

An integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

USN-3592-1 clamav vulnerabilities

It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2018-0202 Hanno Böck discovered that ClamAV incorrectly handled parsing certain X...

SumatraPDF Reader Memory Misreference Vulnerability

SumatraPDF Reader is a free software to view PDF files. A memory misreference vulnerability exists in version 2.x of SumatraPDF Reader prior to 2.2.1. A remote attacker can exploit this vulnerability to execute arbitrary code with the help of specially crafted PDF files...

UBUNTU-CVE-2018-7173

A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding...

JavaScript API Memory Misreference Vulnerability in Multiple Adobe Products

Acrobat DC Continuous Track and so on are the products of the United States Ordoby Adobe.Acrobat DC Continuous Track is a desktop version of the continuous update of the PDF solution.Reader DC Continuous Track is a continuous update of the PDF reading tool version. JavaScript API is one of the...

JavaScript Engine Heap Overflow Vulnerability in Multiple Adobe Products

Acrobat DC Continuous Track and so on are the products of the United States Ordoby Adobe.Acrobat DC Continuous Track is a desktop version of the PDF solution of the continuous update version.Reader DC Continuous Track is a PDF reading tool of the continuous update version! JavaScript engine is on...

Memory Misreference Vulnerability in Multiple Adobe Products (CNVD-2018-05051)

Acrobat DC Continuous Track and so on are the United States of America Auduby Adobe company's products. Acrobat DC Continuous Track is a desktop version of the continuous update of the PDF solution. Reader DC Continuous Track is a continuous update of the PDF reading tool version. Reader DC...

Multiple Adobe Products JBIG2 Decoder Memory Misreference Vulnerability

Acrobat DC Continuous Track and so on are the United States of America Ordoby Adobe company's products. Acrobat DC Continuous Track is a desktop version of the continuous update of the PDF solution. Reader DC Continuous Track is a continuous update of the version of the PDF reading tool. JBIG2...

Foxit Reader and PhantomPDF Heap Buffer Overflow Vulnerability

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. A heap buffer overflow vulnerability exists in Foxit Reader and PhantomPDF versions 7.3.4.311 and earlier. A remote attacker could exploit this vulnerability with Bezier data in...

CVE-2016-6169

Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service memory corruption and application crash or potentially execute arbitrary code via the Bezier data in a crafted PDF file...

Memory Corruption Vulnerability in AnyPDF Reader 5.5

AnyPDF Reader is a simple and practical PDF reader developed by Beijing Ancetone Information Technology Co. AnyPDF Reader version 5.5 has a memory corruption vulnerability when dealing with special PDF files, which can be exploited by attackers to cause denial of service attacks...

Buffer Overflow Vulnerability in Gaaiho Reader

Gaaiho Reader DocuCom PDF Reader is a PDF reader launched by Beijing Zei Nan Xinyu Technology Co. A buffer overflow vulnerability exists in Gaaiho Reader when processing special PDF files. This allows attackers to exploit the vulnerability to launch denial of service attacks or code execution...

Gaaiho Reader suffers from a null pointer reference vulnerability (CNVD-2018-03649)

Gaaiho Reader DocuCom PDF Reader is a PDF reader launched by Beijing Zei Nan Xinyu Technology Co. A null pointer reference vulnerability exists when Gaaiho Reader handles special PDF files. This vulnerability can be exploited by attackers to launch denial of service attacks...

Memory Corruption Vulnerability in Gaaiho Reader

Gaaiho Reader DocuCom PDF Reader is a PDF reader launched by Beijing Zei Nan Xinyu Technology Co. Gaaiho Reader suffers from memory corruption when processing special PDF files. This allows attackers to exploit the vulnerability to launch denial of service attacks...