Menu

Search for hundreds of thousands of exploits

"Multiple PDF Readers - Multiple Remote Buffer Overflows"

Author

Exploit author

LMH

Platform

Exploit platform

linux

Release date

Exploit published date

2007-01-06

1
2
3
4
5
6
7
source: https://www.securityfocus.com/bid/21910/info

Multiple PDF readers are prone to multiple remote buffer-overflow vulnerabilities because the applications fail to bounds-check user-supplied data before copying it into an insufficiently sized buffer. 

An attacker may be able exploit this issue to execute arbitrary code within the context of the affected application. In some circumstances, the vulnerability can be exploited only to cause a denial of service.

https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/29399.pdf
Release Date Title Type Platform Author
2020-12-02 "aSc TimeTables 2021.6.2 - Denial of Service (PoC)" local windows "Ismael Nava"
2020-12-02 "Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality" webapps php "Mufaddal Masalawala"
2020-12-02 "Ksix Zigbee Devices - Playback Protection Bypass (PoC)" remote multiple "Alejandro Vazquez Vazquez"
2020-12-02 "Mitel mitel-cs018 - Call Data Information Disclosure" remote linux "Andrea Intilangelo"
2020-12-02 "Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile" webapps multiple "Shahrukh Iqbal Mirza"
2020-12-02 "ChurchCRM 4.2.0 - CSV/Formula Injection" webapps multiple "Mufaddal Masalawala"
2020-12-02 "DotCMS 20.11 - Stored Cross-Site Scripting" webapps multiple "Hardik Solanki"
2020-12-02 "ChurchCRM 4.2.1 - Persistent Cross Site Scripting (XSS)" webapps multiple "Mufaddal Masalawala"
2020-12-02 "NewsLister - Authenticated Persistent Cross-Site Scripting" webapps multiple "Emre Aslan"
2020-12-02 "IDT PC Audio 1.0.6433.0 - 'STacSV' Unquoted Service Path" local windows "Manuel Alvarez"
Release Date Title Type Platform Author
2020-12-02 "Mitel mitel-cs018 - Call Data Information Disclosure" remote linux "Andrea Intilangelo"
2020-11-27 "libupnp 1.6.18 - Stack-based buffer overflow (DoS)" dos linux "Patrik Lantz"
2020-11-24 "ZeroShell 3.9.0 - 'cgi-bin/kerbynet' Remote Root Command Injection (Metasploit)" webapps linux "Giuseppe Fuggiano"
2020-10-28 "Blueman < 2.1.4 - Local Privilege Escalation" local linux "Vaisha Bernard"
2020-10-28 "aptdaemon < 1.1.1 - File Existence Disclosure" local linux "Vaisha Bernard"
2020-10-28 "PackageKit < 1.1.13 - File Existence Disclosure" local linux "Vaisha Bernard"
2020-10-28 "Oracle Business Intelligence Enterprise Edition 5.5.0.0.0 / 12.2.1.3.0 / 12.2.1.4.0 - 'getPreviewImage' Directory Traversal/Local File Inclusion" webapps linux "Ivo Palazzolo"
2020-09-11 "Gnome Fonts Viewer 3.34.0 - Heap Corruption" local linux "Cody Winkler"
2020-07-10 "Aruba ClearPass Policy Manager 6.7.0 - Unauthenticated Remote Command Execution" remote linux SpicyItalian
2020-07-06 "Grafana 7.0.1 - Denial of Service (PoC)" dos linux mostwanted002
Release Date Title Type Platform Author
2007-01-30 "Apple Mac OSX 10.4.x - Help Viewer '.help' Filename Format String" dos osx LMH
2007-01-30 "Apple Mac OSX 10.4.x - iPhoto 'photo://' URL Handling Format String" dos osx LMH
2007-01-30 "Apple Mac OSX 10.4.x - iMovie HD '.imovieproj' Filename Format String" dos osx LMH
2007-01-30 "Apple Mac OSX 10.4.x - Safari window.console.log Format String" dos osx LMH
2007-01-27 "Apple Installer Package 2.1.5 - Filename Format String" dos osx LMH
2007-01-23 "Apple Mac OSX 10.4.8 - QuickDraw GetSrcBits32ARGB Remote Memory Corruption" dos osx LMH
2007-01-20 "Transmit 3.5.5 - Remote Heap Overflow" dos multiple LMH
2007-01-15 "Ipswitch WS_FTP 2007 Professional - 'WSFTPURL.exe' Local Memory Corruption" dos windows LMH
2007-01-13 "Apple Mac OSX 10.4.8 - DMG UFS UFS_LookUp Denial of Service" dos osx LMH
2007-01-13 "Apple Mac OSX 10.4.8 - DMG HFS+ DO_HFS_TRUNCATE Denial of Service" dos osx LMH
2007-01-12 "Apple Mac OSX 10.4.8 - DMG UFS Byte_Swap_Sbin() Integer Overflow" remote osx LMH
2007-01-10 "Apple Mac OSX 10.4.8 - DMG UFS FFS_MountFS Integer Overflow" dos osx LMH
2007-01-06 "Multiple PDF Readers - Multiple Remote Buffer Overflows" dos linux LMH
2006-11-29 "Apple Mac OSX 10.4.x - 'Shared_Region_Make_Private_Np' Kernel Function Local Memory Corruption" local osx LMH
2006-11-27 "Apple Mac OSX 10.4.x - AppleTalk AIOCRegLocalZN IOCTL Stack Buffer Overflow" local osx LMH
2006-11-26 "Apple Mac OSX 10.4.x - Mach-O Binary Loading Integer Overflow" local osx LMH
2006-11-21 "Apple Mac OSX 10.4.8 - UDTO Disk Image Remote Denial of Service" dos osx LMH
2006-11-20 "Apple Mac OSX 10.4.8 - UDIF Disk Image Remote Denial of Service" dos osx LMH
2006-11-05 "Linux Kernel 2.6.x - 'ISO9660' Denial of Service" dos linux LMH
2006-11-04 "Sun Solaris 10 - 'UFS' Local Denial of Service" dos solaris LMH
2006-11-02 "Linux Kernel 2.6.x - SquashFS Double-Free Denial of Service" dos linux LMH
2006-09-21 "Apple QuickTime 7.1.3 PlugIn - Arbitrary Script Execution" remote linux LMH
import requests
response = requests.get('http://127.0.0.1:8181?format=json')

For full documentation follow the link above

Cipherscan. Find out which SSL ciphersuites are supported by a target.

Identify and fingerprint Web Application Firewall (WAF) products protecting a website.