Mandriva Linux Security Advisory : poppler (MDVSA-2009:068-1)

A crafted PDF file that triggers a parsing error allows remote attackers to cause definal of service. This bug is consequence of a wrong processing on FormWidgetChoice::loadDefaults method CVE-2009-0755. A crafted PDF file that triggers a parsing error allows remote attackers to cause definal of...

Mandrake Security Advisory MDVSA-2009:068-1 (poppler)

The remote host is missing an update to poppler announced via advisory MDVSA-2009:068-1. OpenVAS Vulnerability Test $Id: mdksa20090681.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:068-1 poppler Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandrake Security Advisory MDVSA-2009:068-1 (poppler)

The remote host is missing an update to poppler announced via advisory MDVSA-2009:068-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:068 (poppler)

The remote host is missing an update to poppler announced via advisory MDVSA-2009:068. OpenVAS Vulnerability Test $Id: mdksa2009068.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:068 poppler Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Security Advisory MDVSA-2009:068 (poppler)

The remote host is missing an update to poppler announced via advisory MDVSA-2009:068. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

DEBIAN-CVE-2009-0755

The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file with an invalid Form Opt entry...

CVE-2009-0755

The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file with an invalid Form Opt entry...

CVE-2009-0755

CVE-2009-0755 affects the Poppler PDF rendering library. The FormWidgetChoice::loadDefaults function may crash a process when parsing a malformed PDF that contains an invalid Form Opt entry, enabling a remote denial-of-service condition. The issue is described as affecting Poppler up to version 0...

CVE-2009-0755

The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file with an invalid Form Opt entry...

CVE-2009-0755

creationtimestamp| type| source ---|---|--- 2009-02-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32800...

CVE-2008-0755

The CVE-2008-0755 entry covers a format-string vulnerability in the ReportSysLogEvent function of the LPD server used by cyan soft Opium OPI Server (versions 4.10.1028 and earlier) and related cyanPrintIP products (Easy/OPI Pro/Basic 4.10.1030 and earlier; Workstation 4.10.836 and earlier; Standa...

CentOS 4 : HelixPlayer (CESA-2005:392)

An updated HelixPlayer package that fixes a buffer overflow issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. HelixPlayer is a media player. A buffer overflow bug was found in the way HelixPlayer processes RAM files. An...

dotProject Multiple Scripts Remote File Inclusion

The remote host is running dotProject, a web-based, open source, project management application written in PHP. The installed version of dotProject fails to sanitize input to various parameters and scripts before using it to include PHP code. Provided PHP's 'registerglobals' setting is enabled, a...

CVE-2005-0755

CVE-2005-0755 describes a heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player prior to 10.0.4, and RealOne Player v1/v2. The flaw allows remote attackers to execute arbitrary code by sending a long hostname in a RAM file, enabling code execution and potential control of the affe...

RHEL 4 : RealPlayer (RHSA-2005:363)

An updated RealPlayer package that fixes a buffer overflow issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player that provides solid media playback locally and via streaming. It plays RealAudio,...

RHEL 3 : RealPlayer (RHSA-2005:394)

An updated RealPlayer package that fixes a buffer overflow issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player providing solid media playback locally and via streaming. It plays RealAudio,...

RHEL 4 : HelixPlayer (RHSA-2005:392)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:392 advisory. HelixPlayer is a media player. A buffer overflow bug was found in the way HelixPlayer processes RAM files. An attacker could create a specially crafte...

Mandrake Linux Security Advisory : ruby (MDKSA-2004:128)

Andres Salomon noticed a problem with the CGI session management in Ruby. The CGI:Session's FileStore implementations store session information in an insecure manner by just creating files and ignoring permission issues CVE-2004-0755. The ruby developers have corrected a problem in the ruby CGI...

CVE-2004-0755

The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions...

CVE-2004-0755

The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions...