CVE-2021-43279

An out-of-bounds write vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute...

Cross site scripting

An out-of-bounds read vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute...

CVE-2021-43279

An out-of-bounds write vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute...

CVE-2021-43279

CVE-2021-43279 is an out-of-bounds write in Open Design Alliance PRC SDK/U3D file parsing that can lead to remote code execution. The vulnerability affects Open Design Alliance PRC SDK before 2022.10 and the ODAViewer component handling U3D files. ZDI advisories describe remote code execution via...

CVE-2021-43277

An out-of-bounds read vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute...

CVE-2021-43277

CVE-2021-43277 is an out-of-bounds read in Open Design Alliance PRC SDK’s U3D file parsing. Crafted U3D data can trigger a read past the end of an allocated buffer, with the potential to execute arbitrary code in the context of the current process. This vulnerability is documented across multiple...

CVE-2021-43279: Out-of-bounds Write

An out-of-bounds write vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute...

CVE-2021-43277: Out-of-bounds Read

An out-of-bounds read vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute...

PT-2021-23799

Name of the Vulnerable Software and Affected Versions Open Design Alliance PRC SDK versions prior to 2022.10 Description An out-of-bounds write issue exists in the U3D file reading procedure. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can...

PT-2021-23797

Name of the Vulnerable Software and Affected Versions Open Design Alliance PRC SDK versions prior to 2022.10 Description An out-of-bounds read issue exists in the U3D file reading procedure. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. This can be leveraged b...

Pro-PRC Influence Campaign Expands to Dozens of Social Media Platforms, Websites, and Forums in at Least Seven Languages, Attempted to Physically Mobilize Protesters in the U.S.

In June 2019, Mandiant Threat Intelligence first reported to customers a pro-People’s Republic of China PRC network of hundreds of inauthentic accounts on Twitter, Facebook, and YouTube, that was at that time primarily focused on discrediting pro-democracy protests in Hong Kong. Since then, the...

Memory corruption

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Product Representation Compact PRC engine. Successful exploitation could lead to arbitrary code execution...

CVE-2017-11222

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Product Representation Compact PRC engine. Successful exploitation could lead to arbitrary code execution...

CVE-2017-11222

Technical details for CVE-2017-11222 are not publicly available in the provided documents. Monitor for updates.

PT-2017-11828

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 2017.009.20058 and earlier Adobe Acrobat Reader versions 2017.008.30051 and earlier Adobe Acrobat Reader versions 2015.006.30306 and earlier Adobe Acrobat Reader version 11.0.20 and earlier Description The issue i...

CVE-2017-3019

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the Product Representation Compact PRC format parser. Successful exploitation could lead to arbitrary code execution...

Memory corruption

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the Product Representation Compact PRC format parser. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3019

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the Product Representation Compact PRC format parser. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3019

CVE-2017-3019 affects Adobe Acrobat Reader up to versions 11.0.19, 15.006.30280, and 15.023.20070, where the PRC (Product Representation Compact) format parser contains a memory corruption flaw. Successful exploitation could lead to arbitrary code execution on a vulnerable host. The provided docu...

Adobe Reader DC PRC Parsing Out-Of-Bound Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of P...