Lucene search
+L

788 matches found

Check Point Advisories
Check Point Advisories
•added 2016/07/14 12:00 a.m.•14 views

Adobe Acrobat Reader XFA FormCalc replace Integer Overflow (CVE-2016-1043)

An integer overflow vulnerability exists in Adobe Acrobat Reader. The vulnerability is due to improper validation of the parameters for a certain function. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted document. Successful exploitation of the...

10CVSS9.4AI score0.06567EPSS
SaveExploits0
CNVD
CNVD
•added 2016/05/11 12:00 a.m.•12 views

Adobe Reader DC XFA Page Out-of-Bounds Read Information Disclosure Vulnerability

Adobe Acrobat Reader DC is the United States of America Odooby Adobe company's set of tools for viewing, printing and annotating PDF. A security vulnerability exists in the Adobe Reader DC XFA page that could be exploited by an attacker to access a malicious web page or open a malicious file to...

10CVSS7.4AI score0.05804EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/05/10 12:00 a.m.•32 views

Adobe Reader DC XFA Page prePrint Event Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

10CVSS2.9AI score0.06386EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/05/10 12:00 a.m.•31 views

Adobe Reader DC XFA preOpen Event Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

10CVSS3.1AI score0.0641EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/05/10 12:00 a.m.•59 views

Adobe Reader DC XFA FormCalc replace Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

10CVSS3.9AI score0.06567EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/05/10 12:00 a.m.•39 views

Adobe Reader DC XFA Page Array Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to gain information about the layout of memory on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

10CVSS2.5AI score0.05804EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/05/10 12:00 a.m.•52 views

Adobe Reader DC XFA Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

10CVSS3.8AI score0.05825EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/05/10 12:00 a.m.•36 views

Adobe Reader DC XFA prePrint Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

10CVSS3.1AI score0.0641EPSS
SaveExploits0References1
OSV
OSV
•added 2016/04/22 3:59 p.m.•10 views

CVE-2016-4064

Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted remerge call...

7.8CVSS6.1AI score0.04182EPSS
SaveExploits0References3
NVD
NVD
•added 2016/04/22 3:59 p.m.•26 views

CVE-2016-4064

Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted remerge call...

7.8CVSS7.8AI score0.04182EPSS
SaveExploits0References3
Prion
Prion
•added 2016/04/22 3:59 p.m.•28 views

Design/Logic Flaw

Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted remerge call...

6.8CVSS8AI score0.04182EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
•added 2016/04/22 2:00 p.m.•43 views

CVE-2016-4064

Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted remerge call...

7.8AI score0.04182EPSS
SaveExploits0References3
CVE
CVE
•added 2016/04/22 2:00 p.m.•80 views

CVE-2016-4064

Foxit Reader and Foxit PhantomPDF (Windows) ≤ 7.3.3 are affected by CVE-2016-4064 due to a use-after-free in the XFA forms handling when a crafted remerge call is processed. This leads to remote code execution with high impact (as described in connected sources). Remediation per the documents: up...

7.8CVSS7.8AI score0.04182EPSS
SaveExploits0References3Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/04/22 12:00 a.m.•5 views

CVE-2016-4064: Improper Access Control

Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted remerge call...

7.8CVSS7.9AI score0.04182EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2016/04/18 12:00 a.m.•53 views

Foxit Reader < 7.3.4 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 7.3.4. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists that is triggered when handling FlateDecode streams. An unauthenticated, remote attacker can exploit this, via a crafted PDF...

7.8CVSS6.9AI score0.04529EPSS
SaveExploits0References20
CNVD
CNVD
•added 2016/03/24 12:00 a.m.•10 views

Foxit Reader XFA Page prePrint Event Memory Error References Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the Page prePrint event, which could allow the reuse of a pointer that has already been released in the hanging pointer. An attacker could execute arbitrary code in the...

7.4AI score
SaveExploits0References1
CNVD
CNVD
•added 2016/03/24 12:00 a.m.•16 views

Foxit Reader XFA preOpen Memory Error Referencing Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the preOpen event, which could allow the reuse of a pointer that has already been released in the hanging pointer. An attacker could execute arbitrary code in the current...

7.7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/03/23 12:00 a.m.•25 views

Foxit Reader XFA Page prePrint Event Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/03/23 12:00 a.m.•22 views

Foxit Reader XFA preOpen Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/03/23 12:00 a.m.•28 views

Foxit Reader XFA remerge Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

7.8CVSS3.2AI score0.04182EPSS
SaveExploits0References1
Rows per page
Query Builder