PDF Viewer Heap Buffer Overflow

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the execution of operations beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow unauthorized...

Debian DSA-4753-1 : mupdf - security update

A heap-based buffer overflow flaw was discovered in MuPDF, a lightweight PDF viewer, which may result in denial of service or the execution of arbitrary code if a malformed PDF file is opened. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Debian: Security Advisory (DSA-4753-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 4753-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4753-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 29, 2020 https://www.debian.org/security/faq -...

Shanghai 2-3-4-5 Mobile Technology Co. 2345 View King has a binary vulnerability

2345 Picture Viewer is a picture browsing management software promoted by Shanghai 2,3,4,5 Network Technology Co. A binary vulnerability exists in 2345 Picture Viewer by Shanghai Er345 Mobile Technology Co. Ltd, which can be exploited by attackers to cause a denial of service...

Addressing the Video Quality and Performance Measurement Gap with Quality of Performance (QoP) Metrics

Ubiquity of Digital Video Means Meeting Viewers' Quality Expectations Digital video viewership is on an aggressive growth course. Globally, consumers will spend 84 minutes a day watching online video in 2020, up 25% from 2018i, and digital video viewership will increase from 35% in 2019 to more...

Adobe Acrobat/Reader Buffer Overflow Vulnerability (CNVD-2020-46032)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat/Reader has a buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

Evince Detection (Linux/Unix SSH Login)

SSH based detection of Evince. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.112805";...

gThumb: Arbitrary code execution

Background gThumb is an image viewer and browser for GNOME. Description A heap-based buffer overflow in gThumb’s cairoimagesurfacecreatefromjpeg function, located in extensions/cairoio/cairo-image-surface-jpeg.c was discovered. Impact A remote attacker could entice a user to open a specially...

Foxit Reader < 4.0 Privilege Escalation (macOS)

The version of Foxit Reader for Mac installed on the remote macOS host is prior to 4.0. It is, therefore, affected by a Signature Validation Bypass vulnerability that delivers incorrect validation results when validating certain PDF files that have been modified maliciously or contains non-standa...

RTSP for iOS 1.0 - (IP Address) Denial of Service Exploit

Exploit Title: RTSP for iOS 1.0 - 'IP Address' Denial of Service PoC Author: Luis Martinez Vendor Homepage: https://appadvice.com/app/rtsp-viewer/1056996189 Software Link: App Store for iOS devices Tested Version: 1.0 Vulnerability Type: Denial of Service DoS Local Tested on OS: iPhone 7 iOS 13.5...

Foxit Reader < 10.0.1 Multiple Vulnerabilities

According to its version, the Foxit Reader application installed on the remote Windows host is prior to 10.0.1. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C...

DaviewIndy Memory Misreference Vulnerability

DaViewIndy is a server-based viewer software. A security vulnerability exists in DaviewIndy 8.98.7 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code via specially crafted files...

DaviewIndy Heap Buffer Overflow Vulnerability

DaViewIndy is a server-based viewer software. A heap buffer overflow vulnerability exists in DaviewIndy 8.98.7 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code via specially crafted files...

UAF Vulnerability in CAJViewer 7.3

CAJViewer is a specialized viewer for reading and editing literature in the CNKI series of databases. CAJViewer 7.3 suffers from a UAF vulnerability that can be exploited by attackers to cause a denial of service...

Arbitrary Code Execution

Overview shiba is a Live markdown previewer with linter Affected versions of this package are vulnerable to Arbitrary Code Execution due to the default usage of the function load of the package js-yaml instead of its secure replacement , safeLoad. Remediation There is no fixed version for shiba...

Denial of service vulnerability exists in wpsphoto (CNVD-2020-48547)

wpsphoto is a picture viewing program. A denial of service vulnerability exists in wpsphoto, which can be exploited by an attacker to cause the server to deny service...

PDF Reader Buffer Overflow Unauthorized Access

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

PDF Reader Buffer Overflow Unauthorized Access

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

Adobe Acrobat Privilege Escalation

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to bypassing security features. Exploiting these vulnerabilities can allow attackers...