Carlos Mario Penagos Hollmann

**Name of the Vulnerable Software and Affected Versions** Absolute PDF Server (affected versions not specified) **Description** The issue allows remote attackers to cause a denial of service, potentially leading to an application crash, or possibly execute arbitrary code. This can be achieved by sending a crafted PDF document. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Investintech.com SlimPDF Reader (affected versions not specified) **Description** The issue is related to the improper restriction of arguments to unspecified function calls in SlimPDF Reader, which can be exploited by remote attackers. This can be achieved through a crafted PDF document, potentially leading to a denial of service (application crash) or possibly the execution of arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Able2Doc (affected versions not specified) Able2Doc Professional (affected versions not specified) **Description** The issue is related to an unspecified vulnerability that can be triggered by a crafted document, potentially allowing remote attackers to cause a denial of service, resulting in an application crash, or possibly execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Able2Extract (affected versions not specified) Able2Extract Server (affected versions not specified) **Description** The issue is related to an unspecified vulnerability that can be triggered by a crafted document, potentially allowing remote attackers to cause a denial of service, resulting in an application crash, or possibly execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Investintech.com SlimPDF Reader (affected versions not specified) **Description** The issue is related to improper restriction of write operations in the SlimPDF Reader, which can be exploited by remote attackers using a crafted PDF document. This can lead to a denial of service, causing the application to crash, or potentially allow the execution of arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Investintech.com SlimPDF Reader (affected versions not specified) **Description** The issue is related to improper restriction of read operations during block data moves in crafted PDF documents, which can be exploited by remote attackers to cause a denial of service, resulting in an application crash, or possibly execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Investintech.com SlimPDF Reader (affected versions not specified) **Description** The issue allows remote attackers to cause a denial of service, potentially leading to an application crash, or possibly execute arbitrary code via a crafted PDF document. This is due to the failure of Investintech.com SlimPDF Reader to prevent faulting-instruction data from affecting write operations. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Investintech.com SlimPDF Reader (affected versions not specified) **Description** The issue allows remote attackers to cause a denial of service, potentially leading to an application crash, or possibly execute arbitrary code via a crafted PDF document. This is due to the failure of Investintech.com SlimPDF Reader to prevent faulting-address data from affecting branch selection. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WellinTech KingView versions 6.52 through 6.53 **Description** The issue is related to a stack-based buffer overflow in an ActiveX control in KVWebSvr.dll. This allows remote attackers to execute arbitrary code via a long second argument to the `ValidateUser` method. **Recommendations** For WellinTech KingView versions 6.52 through 6.53, consider disabling the `ValidateUser` method until a patch is available to prevent potential exploitation.

**Name of the Vulnerable Software and Affected Versions** Parodia versions prior to 6.809 **Description** A SQL injection issue allows remote attackers to execute arbitrary SQL commands. **Recommendations** For versions prior to 6.809, update to version 6.809 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Nokia Multimedia Player version 1.00.55.5010 **Description** A stack-based buffer overflow issue allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long entry in a playlist (.npl) file. **Recommendations** For version 1.00.55.5010, avoid using long entries in playlist (.npl) files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.