pdfmate free pdf merger v2.03 malware free

PDFMATE FREE PDF MERGER V2.03 MALWARE FREE PATCH
PDFMATE FREE PDF MERGER V2.03 MALWARE FREE PRO
PDFMATE FREE PDF MERGER V2.03 MALWARE FREE CODE

PDFMATE FREE PDF MERGER V2.03 MALWARE FREE PRO

This issue is only applicable when connecting to an Amazon Workspace from a PCoIP Zero Client.Ī vulnerability has been found in Anvsoft PDFMate PDF Converter Pro 1.7.5.0 and classified as critical. The issue could be exploited by an adversary that places a MITM (Man in the Middle) between a zero client and AWS session provisioner in the network. When connecting to Amazon Workspaces, the SHA256 presented by AWS connection provisioner is not fully verified by Zero Clients. The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code. The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information. The affected product is vulnerable to a SQL injection with high attack complexity, which may allow an unauthorized attacker to disclose information. The affected product is vulnerable to multiple SQL injections that require low privileges for exploitation and may allow an unauthorized attacker to disclose information. The affected product is vulnerable due to missing authentication, which may allow an attacker to read or modify sensitive data and execute arbitrary code, resulting in a denial-of-service condition. The affected product is vulnerable to directory traversal, which may allow an attacker to access unauthorized files and execute arbitrary code. The affected product is vulnerable to two SQL injections that require high privileges for exploitation and may allow an unauthorized attacker to disclose information

Exploitation of this issue requires user interaction in that a victim must open a malicious file.

PDFMATE FREE PDF MERGER V2.03 MALWARE FREE CODE

An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Īdobe Acrobat Reader version 22.001.20085 (and earlier), 20.005.30314 (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Maintainer suggests using instead.Īcrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 20.005.30334 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.

PDFMATE FREE PDF MERGER V2.03 MALWARE FREE PATCH

Source & Patch - versions of package are vulnerable to Prototype Pollution via the main (merge) function. Please note that some of the information in the bulletin is compiled from external, open-source reports and is not a direct result of CISA analysis. Patch information is provided when available. This information may include identifying information, values, definitions, and related links. Low: vulnerabilities with a CVSS base score of 0.0–3.9Įntries may include additional information provided by organizations and efforts sponsored by CISA.Medium: vulnerabilities with a CVSS base score of 4.0–6.9.High: vulnerabilities with a CVSS base score of 7.0–10.0.The division of high, medium, and low severities correspond to the following scores: Vulnerabilities are based on the Common Vulnerabilities and Exposures (CVE) vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available. In some cases, the vulnerabilities in the bulletin may not yet have assigned CVSS scores. The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week.

Pdfmate free pdf merger v2.03 malware free