Lucene search
K

28 matches found

NVD
NVD
added 2023/03/29 7:15 p.m.11 views

CVE-2022-37352

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

5.5CVSS4AI score0.00298EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/03/29 12:0 a.m.9 views

CVE-2022-37352

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6.1AI score0.00298EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2022/08/18 12:0 a.m.34 views

PDF-XChange Editor WMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.1AI score0.00298EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2015/10/29 12:0 a.m.39 views

Amazon Linux AMI : libwmf (ALAS-2015-604)

It was discovered that libwmf did not correctly process certain WMF Windows Metafiles with embedded BMP images. By tricking a victim into opening a specially crafted WMF file in an application using libwmf, a remote attacker could possibly use this flaw to execute arbitrary code with the privileg...

9.3CVSS7.3AI score0.10534EPSS
Exploits4References10
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:0 a.m.30 views

SuSE 11 Security Update : libwmf (SAT Patch Number 822)

A specially crafted WMF files could crash libwmf. CVE-2009-1364 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. include'deprecatednasllevel.inc';...

7.5CVSS5.9AI score0.03145EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2009/04/23 12:0 a.m.31 views

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : openoffice.org, openoffice.org-amd64 vulnerabilities (USN-677-1)

Multiple memory overflow flaws were discovered in OpenOffice.org's handling of WMF and EMF files. If a user were tricked into opening a specially crafted document, a remote attacker might be able to execute arbitrary code with user privileges. CVE-2008-2237, CVE-2008-2238 Dmitry E. Oboukhov...

9.3CVSS5.7AI score0.08775EPSS
Exploits2References4
OpenVAS
OpenVAS
added 2009/03/23 12:0 a.m.24 views

Ubuntu: Security Advisory (USN-406-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.7AI score0.18514EPSS
Exploits0References2
securityvulns
securityvulns
added 2009/03/10 12:0 a.m.45 views

Microsoft Windows kernel multiple security vulnerabilities

Multiple security vulnerabilities allow code execution via EMF/WMF files...

9.3CVSS3.4AI score0.66505EPSS
Exploits2References1
Tenable Nessus
Tenable Nessus
added 2008/11/03 12:0 a.m.27 views

Fedora 8 : openoffice.org-2.3.0-6.17.fc8 (2008-9333)

A security release to address: - CVE-2008-2237: Manipulated WMF files - CVE-2008-2238: Manipulated EMF files as described at http://www.openoffice.org/security/bulletin.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

9.3CVSS5.3AI score0.08775EPSS
Exploits1References6
Debian
Debian
added 2008/10/30 10:37 a.m.34 views

[Backports-security-announce] Security update for openoffice.org

Rene Engelhard uploaded new packages for openoffice.org which fixed the following security problems: Debian BTS 496361 left-over debugging echos writing into an insecure temp file can allow attackers to overwrite files on the system with the prvilieges of the user executing senddoc File - Send...

9.3CVSS3.6AI score0.08775EPSS
Exploits1
FreeBSD
FreeBSD
added 2008/10/29 12:0 a.m.28 views

openoffice -- arbitrary code execution vulnerabilities

The OpenOffice Team reports: A security vulnerability with the way OpenOffice 2.x process WMF files may allow a remote unprivileged user who provides a StarOffice/StarSuite document that is opened by a local user to execute arbitrary commands on the system with the privileges of the user running...

9.3CVSS7AI score0.08775EPSS
Exploits1References2
securityvulns
securityvulns
added 2008/04/09 12:0 a.m.55 views

Microsoft Windows GDI multiple security vulnerabilities

Multiple buffer overflows on EMF and WMF files parsing...

9.3CVSS4AI score0.75075EPSS
Exploits6References4
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.18 views

Debian Security Advisory DSA 954-1 (wine)

The remote host is missing an update to wine announced via advisory DSA 954-1. H D Moore that discovered that Wine, a free implemention of the Microsoft Windows APIs, inherits a design flaw from the Windows GDI API, which may lead to the execution of code through GDI escape functions in WMF files...

7.5CVSS0.3AI score0.01616EPSS
Exploits13
Tenable Nessus
Tenable Nessus
added 2007/11/10 12:0 a.m.35 views

Ubuntu 5.10 / 6.06 LTS : openoffice.org/-amd64, openoffice.org2/-amd64 vulnerability (USN-406-1)

An integer overflow was discovered in OpenOffice.org's handling of WMF files. If a user were tricked into opening a specially crafted WMF file, an attacker could execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the preceding description block directly...

9.3CVSS6AI score0.18514EPSS
Exploits0References2
securityvulns
securityvulns
added 2007/04/04 12:0 a.m.36 views

Microsoft Windows DoS with WMF files

Uninitialized memory reference in system kernel...

7.1CVSS3.4AI score0.73816EPSS
Exploits13References1
securityvulns
securityvulns
added 2007/02/20 12:0 a.m.361 views

IrfanView DoS

Program hangs on corrupted WMF files open...

4.3CVSS2AI score0.21264EPSS
Exploits0References1Affected Software1
Ubuntu
Ubuntu
added 2007/01/12 6:58 a.m.90 views

USN-406-1: OpenOffice.org vulnerability

An integer overflow was discovered in OpenOffice.org's handling of WMF files. If a user were tricked into opening a specially crafted WMF file, an attacker could execute arbitrary code with user privileges...

9.3CVSS5.9AI score0.18514EPSS
Exploits0
securityvulns
securityvulns
added 2007/01/04 12:0 a.m.44 views

OpenOffice buffer overflow

Integer overflow leads to heap buffer overflow on EMF/WMF files parsing...

3.7AI score
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2006/10/14 12:0 a.m.19 views

Debian DSA-954-1 : wine - design flaw

H D Moore has discovered that Wine, a free implementation of the Microsoft Windows APIs, inherits a design flaw from the Windows GDI API, which may lead to the execution of code through GDI escape functions in WMF files. The old stable distribution woody does not seem to be affected by this...

7.5CVSS5.6AI score0.01616EPSS
Exploits13References3
Check Point Advisories
Check Point Advisories
added 2006/08/13 12:0 a.m.2 views

Preemptive Protection against Microsoft Windows WMF File Handling Denial of Service Vulnerability

Several Microsoft Windows operating systems fail to process malformed WMF files. A remote attacker can trigger this flaw to deny service from legitimate users. By convincing a user to visit a specially crafted Web page or to open a malformed image file, an attacker could cause applications on the...

2.6CVSS3.2AI score0.30974EPSS
Exploits1
Rows per page
Query Builder