Remote Code Execution Flaws Impact Aspose APIs

guest · Aug 22, 2019

Remote Code Execution Flaws Impact Aspose APIs
August 22, 2019
https://www.securityweek.com/remote-code-execution-flaws-impact-aspose-apis

The APIs provided by Aspose are designed to help with the manipulation and conversion of a broad range of document formats. The discovered security flaws impact APIs that help with the processing of PDF, Microsoft Word, and other file types.

To exploit these vulnerabilities, an attacker would need to send a specially crafted file to the targeted user and then trick them into opening the file while using the corresponding API, Talos explains.
No patch is currently available for any of these vulnerabilities, but Talos has decided to publish information on them after numerous unsuccessful attempts to contact Aspose.
Click to expand...

Cisco Talos: Vulnerability Spotlight: Multiple vulnerabilities in Aspose APIs

guest · Sep 17, 2019

Vulnerability Spotlight: Multiple vulnerabilities in Aspose PDF API
September 17, 2019
https://blog.talosintelligence.com/2019/09/vuln-spotlight-aspose-PDF-API-sept-2019.html

Cisco Talos recently discovered multiple remote code execution vulnerabilities in the Aspose.PDF API. Aspose provides a series of APIs for manipulating or converting a large family of document formats. These vulnerabilities exist in APIs that help process PDFs. An attacker could exploit these vulnerabilities by sending a specially crafted, malicious file to the target and trick them into opening it while using the corresponding API.

In accordance with our coordinated disclosure policy, Cisco Talos worked with Aspose to ensure that these issues are resolved and that an update is available for affected customers.
Click to expand...

Log in or Sign up

Remote Code Execution Flaws Impact Aspose APIs

guest Guest

guest Guest

Log in or Sign up

Remote Code Execution Flaws Impact Aspose APIs

guest Guest

guest Guest

Useful Searches