Stack Overflow Vulnerability in Gaaiho Reader

Gaaiho Reader DocuCom PDF Reader is a PDF reader launched by Beijing Zei Nan Xinyu Technology Co. Gaaiho Reader suffers from a stack overflow vulnerability when processing special PDF files. This allows attackers to exploit the vulnerability to launch a denial of service attack...

Null Pointer Reference Vulnerability in Gaaiho Reader

Gaaiho Reader DocuCom PDF Reader is a PDF reader launched by Beijing Zei Nan Xinyu Technology Co. A null pointer reference vulnerability exists when Gaaiho Reader handles special PDF files. This vulnerability can be exploited by attackers to launch denial of service attacks...

DEBIAN-CVE-2018-6544

pdfloadobjstm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack, which allows remote attackers to cause a denial of service via a crafted PDF document...

Fedora 27 : clamav (2018-cb339851e7)

ClamAV 0.99.3 ============= This release is a security release and is recommended for all ClamAV users. Please see details below : 1. ClamAV UAF use-after-free Vulnerabilities CVE-2017-12374 --------------------------------------------------------------- The ClamAV AntiVirus software versions...

PoDoFo 'PdfParser::ReadObjectsInternal' function denial-of-service vulnerability

PoDoFo is an open source , written in C++ using the PDF file format library . PoDoFo 0.9.5 version of the base/PdfParser.cpp file of the 'PdfParser::ReadObjectsInternal' function has a security vulnerability. A remote attacker can exploit this vulnerability to cause a denial of service with the...

ClamAV <= 0.99.2 Multiple Vulnerabilities - Linux

ClamAV is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav"; ifdescription...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a...

UBUNTU-CVE-2018-6352

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file...

DEBIAN-CVE-2017-12376

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking...

ALPINE-CVE-2018-6187

In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability in the dopdfsavedocument function in the pdf/pdf-write.c file. Remote attackers could leverage the vulnerability to cause a denial of service via a crafted pdf file...

UBUNTU-CVE-2018-6187

In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability in the dopdfsavedocument function in the pdf/pdf-write.c file. Remote attackers could leverage the vulnerability to cause a denial of service via a crafted pdf file...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function base/PdfOutputStream.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or...

DEBIAN-CVE-2018-5295

In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function base/PdfXRefStreamParserObject.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file...

Github Electron URL Spoofing Vulnerability

GitHub Electron is an application development framework from the American company GitHub. The framework supports writing cross-platform desktop applications using JavaScript, HTML and CSS. A security vulnerability exists in Github Electron versions 1.6.4 through 1.6.11 and 1.7.0 through 1.7.5. An...

CVE-2017-17866

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

DEBIAN-CVE-2017-1000159

Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2017-36597)

Adobe Acrobat and Reader is the United States Ordoby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files exist out-of-bounds read vulnerability, allowing remote attackers can exploit the vulnerability to submit a special file, inducing the user to parse, can...

Adobe Acrobat/Reader Type Obfuscation Vulnerability

Adobe Acrobat and Reader is the United States Ordoby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files there is a type confusion vulnerability, allowing remote attackers can take advantage of the vulnerability to submit a special file, inducing the user to...

sam2p integer overflow vulnerability (CNVD-2017-36354)

sam2p is a command-line utility that can convert many raster bitmap image formats such as GIF, JPG/JPEG and PNG to PostScript or PDF files. An integer overflow vulnerability exists in input-bmp.ci in the ReadImage function in sam2p version 0.49.4, for which there is currently no detailed...

The vulnerability of the PDFDelegateMessage component (coders/pdf.c) in the ImageMagick graphical editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PDFDelegateMessage component coders/pdf.c in the ImageMagick graphical editor related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...