Xu Peng from UCAS and Wang Yanhao from QiAnXin Technology Research Institute working with Trend Micro Zero Day Initiative
#PHANTOM 4 SOFTWARE FOR MAC PDF#
Hou JingYi potential issues where the application could be exposed to Use-after-Free Remote Code Execution vulnerability and crash when handling the annotation objects in certain PDF files if the same Annotation dictionary is referenced in the page structures for different pages. Attackers could exploit this vulnerability to create arbitrary files in the local system and inject the uncontrolled contents. Xu Peng from UCAS and Wang Yanhao from QiAnXin Technology Research Institute working with Trend Micro Zero Day from Codesafe Team of Legendsec at Qi'anxin Group working with Trend Micro Zero Day InitiativeĪddressed a potential issue where the application could be exposed to Arbitrary File Write vulnerability when executing the submitForm function. Xinyu Wan, Yiwei Zhang and Wei You from Renmin University of ChinaĪddressed potential issues where the application could be exposed to Use-after-Free Remote Code Execution vulnerability and crash when handling certain Javascripts or annotation objects. This occurs due to the access of illegal memory as the application fails to restrict the access to an array outside its bounds when calling the util.scand function. This occurs due to the access violation in the array subscript when storing the offset value for the indirect object because the array size created based on the /Size entry whose value is smaller than the actual maximum indirect object number is not enough to accommodate the data.Īddressed a potential issue where the application could be exposed to Out-of-Bounds Read Information Disclosure vulnerability and crash when processing certain arguments. Addressed potential issues where the application could be exposed to Out-of-Bounds Read/Write or Null Pointer Dereference vulnerability and crash when parsing certain PDF files.
0 kommentar(er)
