CVE-2022-35669

Adobe Acrobat Reader DC/Continuious (Windows/macOS) is affected by CVE-2022-35669: an out-of-bounds read in font parsing leading to potential information disclosure and memory bypasses such as ASLR. Affected versions include 22.001.20142 and earlier, 20.005.30334 and earlier. Exploitation require...

CVE-2022-35669 Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader versions 22.001.20142 and earlier, 20.005.30334 and earlier and 20.005.30334 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits

The Microsoft Threat Intelligence Center MSTIC and the Microsoft Security Response Center MSRC found a private-sector offensive actor PSOA using multiple Windows and Adobe 0-day exploits, including one for the recently patched CVE-2022-22047, in limited and targeted attacks against European and...

Adobe Acrobat Reader 缓冲区错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. A buffer overflow vulnerability exists in Adobe Acrobat Reader version 22.001.20142 and earlier, version 20.005.30334 and earlier, which stems from a boundary error...

CVE-2020-28471

This affects the package properties-reader before 2.2.0...

CVE-2020-28471

This affects the package properties-reader before 2.2.0...

Design/Logic Flaw

This affects the package properties-reader before 2.2.0...

CVE-2020-28471 Prototype Pollution

This affects the package properties-reader before 2.2.0...

CVE-2020-28471

CVE-2020-28471 affects the Node.js package properties-reader before v2.2.0 and is a prototype pollution vulnerability. Public docs confirm the issue as a prototype pollution in properties-reader, with Bitbucket Data Center/Server references noting the vulnerability in 8.19.x releases and advising...

properties-reader 安全漏洞

properties-reader is a Node.js property reader compatible with ini files by Steve King, a personal developer. A security vulnerability exists in properties-reader prior to version 2.2.0, which stems from the package's susceptibility to prototype contamination, and which can be exploited by an...

Vulnerabilities fixed in Foxit PDF Reader and Foxit PDF Editor

Vulnerabilities have been fixed in the PDF Reader and PDF Editor from Foxit. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to system data This...

Fedora: Security Advisory for golang-rsc-pdf (FEDORA-2022-3e1ade35db)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2022-55639)

Foxit PDF Reader is China Foxit Foxit company a PDF reader. Foxit PDF Reader suffers from a buffer overflow vulnerability that originates from the application failing to properly validate the allocation boundaries of an object when handling certain JavaScript, which can be exploited by an attacke...

Foxit PDF Reader Information Disclosure Vulnerability (CNVD-2023-07844)

Foxit PDF Reader is a PDF reader from Foxit, a Chinese company. Foxit PDF Reader is vulnerable to information disclosure, which can be exploited by attackers to obtain sensitive information...

GO-2022-0524 Stack exhaustion when reading certain archives in compress/gzip

Calling Reader.Read on an archive containing a large number of concatenated 0-length compressed files can cause a panic due to stack exhaustion...

UBUNTU-CVE-2022-33967

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service DoS condition or arbitrary code...

[SECURITY] Fedora 35 Update: golang-rsc-pdf-0.1.1-10.fc35

PDF reader library in Go...

Foxit PDF Reader Resource Management Error Vulnerability (CNVD-2023-49832)

Foxit PDF Reader is China Foxit Foxit company a PDF reader. A resource management error vulnerability exists in Foxit PDF Reader, which stems from a specific flaw in the handling of Annotation objects, and can be exploited by an attacker to execute code in the context of the current process...

Foxit PDF Reader Resource Management Error Vulnerability (CNVD-2023-49833)

Foxit PDF Reader is China Foxit Foxit company a PDF reader. Foxit PDF Reader suffers from a resource management error vulnerability that stems from a specific flaw in the handling of Doc objects, which can be exploited by an attacker to execute code in the context of the current process...

Foxit PDF Reader Resource Management Error Vulnerability (CNVD-2023-49836)

Foxit PDF Reader is China Foxit Foxit company a PDF reader. Foxit PDF Reader suffers from a Resource Management Error vulnerability that stems from a specific flaw in the handling of Doc objects, which can be exploited by an attacker to execute code in the context of the current process...