MuhammaraJS 代码问题漏洞

MuhammaraJS is a node module with c/cpp bindings by the individual developer Julian Hille. A security vulnerability exists in MuhammaraJS versions prior to 2.6.0. An attacker exploited the vulnerability to cause a denial of service via a specially crafted PDF file...

PT-2022-24941 · Npm · Muhammara +1

Name of the Vulnerable Software and Affected Versions: muhammara versions prior to 2.6.0 hummus affected versions not specified Description: The issue is related to a Denial of Service DoS condition that occurs when a maliciously crafted PDF file is supplied to be appended to another. This can...

PT-2022-25703 · Sap · Pdfpublishing.Dll +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue is caused by a lack of proper memory management. When a victim opens a manipulated Portable Document Format .pdf file received from untrusted sources, it is possible that a Remo...

SAP 3D Visual Enterprise Author 缓冲区错误漏洞

SAP 3D Visual Enterprise Author is a desktop application from SAP Germany for managing 2D, 3D, animation, video and audio assets. SAP 3D Visual Enterprise Author suffers from a buffer overflow vulnerability that stems from a lack of proper memory management and can be exploited by an attacker to...

CVE-2022-33887

A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process...

CVE-2022-33885

A maliciously crafted XB, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution...

CVE-2022-33885

A maliciously crafted XB, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution...

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. A buffer error vulnerability exists in Autodesk AutoCAD that stems from parsing maliciously crafted XB, CATIA, and PDF files can be used to write to a buffer that exceeds the allocated buffer,...

PT-2022-21888 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD version 2023 Description: The issue arises when a maliciously crafted PDF file is parsed through the software, leading to an unhandled exception. This can be exploited by an attacker to cause a crash, read sensitive data, or...

DEBIAN-CVE-2022-3196

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

UBUNTU-CVE-2022-3197

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

SWFTools 缓冲区错误漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that stems from a segmentation violation in the InfoOutputDev::type3D1 location of /pdf/InfoOutputDev.cc...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome that originates from a memory reuse after release situation in PDF...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome that originates from a memory reuse after release situation in PDF...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the JBIG2 decoder JBIG2Stream::readTextRegionSeg in JBIGStream.cc. Exploiting this vulnerability is possible by processing a specially crafted PDF file or JBIG2 image. Remediation Upgrade poppler to...

The vulnerability of the PDF-XChange PDF document viewing and editing program lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing and editing software PDF-XChange lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malicious J2K file...

Vulnerability of PDF-content handling browsers Google Chrome and Microsoft Edge, allowing attackers to execute arbitrary code

The vulnerability of PDF-content handling browsers like Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created website...

Adobe Acrobat Reader DC 缓冲区错误漏洞

Adobe Acrobat Reader DC is the United States of America Odooby Adobe a Pdf reading tool. It is used to reliably view, print and annotate Pdf documents. A buffer error vulnerability exists in Adobe Acrobat Reader DC, which originates from out-of-bounds reads while parsing a file...

编号撤回

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. This CVE number has been withdrawn...

The vulnerability of the APDFL library used by the 3D JT JT2Go viewer and the Teamcenter Visualization lifecycle management system allows a perpetrator to execute arbitrary code or trigger a service failure.

The vulnerability of the APDFL viewer tool for 3D JT and JT2Go, as well as the Teamcenter Visualization lifecycle management system, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow attackers to execute arbitrary code or cause service...