PDF Reader Buffer Overflow Unauthorized Access

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

PDF Reader Buffer Overflow Unauthorized Access

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

PDF Reader Buffer Overflow Unauthorized Access

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

PDF Reader Buffer Overflow Unauthorized Access

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

PDF viewing and editing Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 is related to the use of memory after it is freed. Exploiting this vulnerability could allow a...

[SECURITY] Fedora 32 Update: xpdf-4.02-4.fc32

Xpdf is an X Window System based viewer for Portable Document Format PDF files. Xpdf is a small and efficient program which uses standard X fonts...

[SECURITY] Fedora 31 Update: xpdf-4.02-4.fc31

Xpdf is an X Window System based viewer for Portable Document Format PDF files. Xpdf is a small and efficient program which uses standard X fonts...

Samsung Smart Viewer Cross-site Scripting (CVE-2018-11689)

A cross-site scripting vulnerability exists in Samsung smartviewer . Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Extreme Viewer suffers from buffer overflow vulnerability

Extreme Photo Viewer is ultra-fast and ultra-high-definition photo viewing software, compatible with all mainstream image formats and professional image formats. Ltd. A buffer overflow vulnerability exists in Extreme Viewer, which can be exploited by an attacker to cause a denial of service...

Extreme Viewing suffers from a buffer overflow vulnerability (CNVD-2020-41322)

Speed View is a super-fast ultra-high-definition viewing software, compatible with almost all mainstream, professional image formats, can quickly open dozens of megabytes or even hundreds of megabytes of large pictures, but also supports a variety of shortcut operations. Extreme Viewer suffers fr...

PDF Viewer Buffer Overflow Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attack...

PDF Viewer Memory Use Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 is related to the use of memory after it is freed. Exploiting this vulnerability allow...

PDF Viewing Privilege Management Code Execution

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to privilege management errors. Exploiting these vulnerabilities can allow a malicio...

Privilege Escalation

Apache Karaf is vulnerable to privilege escalation. A user with a viewer role and non-admin privilege can call get in etc/jmx.acl.cfg. Subsequently, calling getMBeansFromURL can lead to SSRF and pollution of the MBean registry...

CVE-2020-11980

In Karaf, JMX authentication takes place using JAAS and authorization takes place using ACL files. By default, only an "admin" can actually invoke on an MBean. However there is a vulnerability there for someone who is not an admin, but has a "viewer" role. In the 'etc/jmx.acl.cfg', such as role c...

Privilege escalation

In Karaf, JMX authentication takes place using JAAS and authorization takes place using ACL files. By default, only an "admin" can actually invoke on an MBean. However there is a vulnerability there for someone who is not an admin, but has a "viewer" role. In the 'etc/jmx.acl.cfg', such as role c...

CVE-2020-11980

CVE-2020-11980 affects Apache Karaf JMX where JAAS-based authentication and ACL-based authorization allow a non-admin with a viewer role to call get* via etc/jmx.acl.cfg, potentially triggering getMBeansFromURL to fetch MBeans remotely and register them, enabling SSRF-like behavior and MBean regi...

CVE-2020-11980

In Karaf, JMX authentication takes place using JAAS and authorization takes place using ACL files. By default, only an "admin" can actually invoke on an MBean. However there is a vulnerability there for someone who is not an admin, but has a "viewer" role. In the 'etc/jmx.acl.cfg', such as role c...

CVE-2020-11980: Server-Side Request Forgery (SSRF)

In Karaf, JMX authentication takes place using JAAS and authorization takes place using ACL files. By default, only an "admin" can actually invoke on an MBean. However there is a vulnerability there for someone who is not an admin, but has a "viewer" role. In the 'etc/jmx.acl.cfg', such as role c...

Unspecified Vulnerability in IrfanView

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A security vulnerability exists in IrfanView version 4.54. No details of the vulnerability are provided at this time...