| |
ID ▼ |
Type ▼ |
Status ▼ |
Priority ▼ |
Milestone ▼ |
Owner ▼ |
Summary + Labels ▼ |
... |
|
|
94 |
----
|
Fixed
|
----
|
----
|
forshaw@google.com
|
Windows Acrobat Reader 11 Sandbox Escape in NtSetInformationFile
CCProjectZeroMembers
|
|
|
|
103 |
----
|
Fixed
|
----
|
----
|
forshaw@google.com
|
Windows Acrobat Reader 11 Sandbox Escape in MoveFileEx IPC Hook
CCProjectZeroMembers
|
|
|
|
139 |
----
|
Fixed
|
----
|
----
|
mjurczyk@google.com
|
Adobe Reader X and XI for Windows out-of-bounds write in AGM.dll
CCProjectZeroMembers
|
|
|
|
140 |
----
|
Fixed
|
----
|
----
|
mjurczyk@google.com
|
Adobe Reader X for Windows out-of-bounds read/write in CoolType.dll
CCProjectZeroMembers
|
|
|
|
141 |
----
|
Fixed
|
----
|
----
|
mjurczyk@google.com
|
Adobe Reader X and XI for Windows object use-after-free in AcroForm.api
CCProjectZeroMembers
|
|
|
|
142 |
----
|
Fixed
|
----
|
----
|
mjurczyk@google.com
|
Adobe Reader X for Windows out-of-bounds read in AGM.dll
CCProjectZeroMembers
|
|
|
|
143 |
----
|
Fixed
|
----
|
----
|
mjurczyk@google.com
|
Adobe Reader X and XI for Windows out-of-bounds read in AcroRd32.dll
CCProjectZeroMembers
|
|
|
|
144 |
----
|
Fixed
|
----
|
----
|
mjurczyk@google.com
|
Adobe Reader X and XI for Windows out-of-bounds write in CoolType.dll
CCProjectZeroMembers
|
|
|
|
145 |
----
|
Fixed
|
----
|
----
|
mjurczyk@google.com
|
Adobe Reader X for Windows out-of-bounds write in AcroRd32.dll
CCProjectZeroMembers
|
|
|
|
146 |
----
|
Fixed
|
----
|
----
|
mjurczyk@google.com
|
Adobe Reader X and XI for Windows unmapped memory read in AGM.dll
CCProjectZeroMembers
|
|
|
|
147 |
----
|
Fixed
|
----
|
----
|
mjurczyk@google.com
|
Adobe Reader X for Windows out-of-bounds read in CoolType.dll
CCProjectZeroMembers
|
|
|
|
148 |
----
|
Fixed
|
----
|
----
|
mjurczyk@google.com
|
Adobe Reader X and XI for Windows unmapped memory read in AGM.dll
CCProjectZeroMembers
|
|
|
|
149 |
----
|
Fixed
|
----
|
----
|
mjurczyk@google.com
|
Adobe Reader X and XI for Windows out-of-bounds read in CoolType.dll
CCProjectZeroMembers
|
|
|
|
247 |
----
|
Fixed
|
----
|
----
|
mjurczyk@google.com
|
Adobe Reader CoolType out-of-bounds reads from the input CharString stream
CCProjectZeroMembers
|
|
|
|
248 |
----
|
Fixed
|
----
|
----
|
mjurczyk@google.com
|
Adobe Reader CoolType use of uninitialized memory in transient array
CCProjectZeroMembers
|
|
|
|
249 |
----
|
Fixed
|
----
|
----
|
mjurczyk@google.com
|
Adobe Reader CoolType heap-based buffer overflow in Counter Control Hints
CCProjectZeroMembers
|
|
|
|
250 |
----
|
Fixed
|
----
|
----
|
mjurczyk@google.com
|
Adobe Reader CoolType heap-based buffer underflow due to integer overflow in STOREWV
CCProjectZeroMembers
|
|
|
|
258 |
----
|
Fixed
|
----
|
----
|
mjurczyk@google.com
|
Adobe Reader CoolType unlimited out-of-bounds stack manipulation via BLEND operator
CCProjectZeroMembers
|
|
|
|
406 |
----
|
Fixed
|
----
|
----
|
forshaw@google.com
|
Adobe Reader: NtSetInformationFile Rename Check Bypass Elevation of Privilege
CCProjectZeroMembers
|
|