USN-2707-1 firefox vulnerability

Cody Crews discovered a way to violate the same-origin policy to inject script in to a non-privileged part of the PDF viewer. If a user were tricked in to opening a specially crafted website, an attacker could exploit this to read sensitive information from local files. CVE-2015-4495...

Warning! Update Mozilla Firefox to Patch Critical File Stealing Vulnerability

Earlier this week, Mozilla Security researcher Cody Crews discovered a malicious advertisement on a Russian news site that steals local files from a system and upload them to a Ukrainian server without the user ever knowing. The malicious advertisement was exploiting a serious vulnerability in...

Same origin violation and local file stealing via PDF reader — Mozilla

Security researcher Cody Crews reported on a way to violate the same origin policy and inject script into a non-privileged part of the built-in PDF Viewer. This would allow an attacker to read and steal sensitive local files on the victim's computer...

KLA10642 Obtain sensitive information vulnerability in Mozilla Firefox and Firefox ESR

An unspecified vulnerability was found in Mozilla Firefox. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via vectors related ti PDF viewer. Technical details There are way to bypass same origin policy and inject...

Mozilla Releases Security Updates for Firefox

The Mozilla Foundation has released security updates to address a critical vulnerability in the built-in PDF Viewer for Firefox and Firefox ESR. Exploitation of the vulnerability may allow an attacker to steal files from an affected computer. Available updates include: Firefox 39.0.3 Firefox ESR...

One font vulnerability to rule them all #1: Introducing the BLEND vulnerability

Posted by Mateusz Jurczyk of Google Project Zero Last month, I presented parts of my PostScript font security research at the REcon security conference in Montreal, in a talk titled “One font vulnerability to rule them all: A story of cross-software ownage, shared codebases and advanced...

The vulnerability of the Firefox browser, which allows a hacker to execute arbitrary code

The vulnerability of the PDF.js module for the Firefox browser is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, by circumventing current access restrictions...

The vulnerability of the Adobe Reader DC PDF viewer program, which allows a hacker to circumvent existing access restrictions

The vulnerability of the Adobe Reader DC PDF viewer program is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to circumvent existing access restrictions remotely...

Design/Logic Flaw

content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 44.0.2403.89 does not ensure that a PDF document's modal dialog is closed upon navigation to an interstitial page, which allows remote attackers to spoof URLs via a crafted document, as demonstrated by the alertdialog.pdf...

The vulnerability of the Adobe Reader PDF viewer program allows a hacker to circumvent access restrictions.

The vulnerability of the Adobe Reader PDF viewer program is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass restrictions on access to the JavaScript API...

The vulnerability of the Adobe Reader PDF viewer program allows a hacker to circumvent access restrictions.

The vulnerability of the Adobe Reader PDF viewer program is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass restrictions on access to the JavaScript API...

IBM Lotus Notes Attachment Viewer UUE File Handling Buffer Overflow - ver 2 (CVE-2005-2618)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over the SMTP, POP and IMAP protocols. There exists a buffer overflow vulnerability in IBM Lotus Notes Attachment Viewer...

The vulnerability of the Adobe Reader PDF viewer program allows a hacker to circumvent access restrictions.

The vulnerability of the Adobe Reader PDF viewer program is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass restrictions on access to the JavaScript API...

The vulnerability of the Adobe Reader PDF viewer program allows a hacker to circumvent access restrictions.

The vulnerability of the Adobe Reader PDF viewer program is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass restrictions on access to the JavaScript API...

The vulnerability of the Adobe Reader DC PDF viewer program allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Adobe Reader DC PDF viewer program arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure...

The vulnerability of the Adobe Reader DC PDF viewer program allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Reader DC PDF viewer program is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Adobe Reader DC PDF viewer program allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Reader DC PDF viewer program is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Adobe Reader DC PDF viewer program allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Adobe Reader DC PDF viewer program arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure...

The vulnerability of the Adobe Reader DC PDF viewer program, which allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Reader DC PDF viewer program is related to buffer overflows in the dynamic memory, caused by integer overflows. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Adobe Reader DC PDF viewer program, which allows a hacker to circumvent access restrictions

The vulnerability of the Adobe Reader DC PDF viewer program is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass restrictions on access to the JavaScript API...