Mandriva Linux Security Advisory : qemu (MDVSA-2009:257)

Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine. CVE-2008-0928 The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C...

SuSE 11 Security Update : acroread_ja (SAT Patch Number 769)

Multiple flaws in the JBIG2 decoder and the JavaScript engine of the Adobe Reader allowed attackers to crash acroread or even execute arbitrary code by tricking users into opening specially crafted PDF files. CVE-2009-0658 / CVE-2009-0927 / CVE-2009-0193 / CVE-2009-0928 / CVE-2009-1061 /...

RHEL 3 / 4 / 5 : acroread (RHSA-2009:0376)

Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team...

openSUSE Security Update : acroread (acroread-689)

Multiple flaws in the JBIG2 decoder and the JavaScript engine of the Adobe Reader allowed attackers to crash acroread or even execute arbitrary code by tricking users into opening specially crafted PDF files. CVE-2009-0658, CVE-2009-0927, CVE-2009-0193, CVE-2009-0928, CVE-2009-1061, CVE-2009-1062...

openSUSE Security Update : acroread (acroread-689)

Multiple flaws in the JBIG2 decoder and the JavaScript engine of the Adobe Reader allowed attackers to crash acroread or even execute arbitrary code by tricking users into opening specially crafted PDF files. CVE-2009-0658, CVE-2009-0927, CVE-2009-0193, CVE-2009-0928, CVE-2009-1061, CVE-2009-1062...

Debian Security Advisory DSA 1799-1 (qemu)

The remote host is missing an update to qemu announced via advisory DSA 1799-1. OpenVAS Vulnerability Test $Id: deb17991.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1799-1 qemu Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1799-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1799-1] New qemu packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1799-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 11, 2009 http://www.debian.org/security/faq -...

SuSE Security Summary SUSE-SR:2009:009

The remote host is missing updates announced in advisory SUSE-SR:2009:009. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

Gentoo Security Advisory GLSA 200904-17 (acroread)

The remote host is missing updates announced in advisory GLSA 200904-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

openSUSE 10 Security Update : qemu (qemu-6123)

qemu update to version 0.10.1 fixes the following security issues : CVE-2008-0928: problems with range checks of block devices CVE-2008-1945: problems with removable media handling CVE-2008-2382: vnc server DoS CVE-2008-4539: fix a heap overflow in the cirrus VGA implementation CVE-2008-5714: off...

SuSE Security Advisory SUSE-SA:2009:014 (acroread)

The remote host is missing updates announced in advisory SUSE-SA:2009:014. OpenVAS Vulnerability Test $Id: susesa2009014.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:014 acroread Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

RedHat Security Advisory RHSA-2009:0376

The remote host is missing updates announced in advisory RHSA-2009:0376. Adobe Reader allows users to view and print documents in Portable Document Format PDF. Multiple input validation flaws were discovered in the JBIG2 compressed images decoder used by Adobe Reader. A malicious PDF file could...

RedHat Security Advisory RHSA-2009:0376

The remote host is missing updates announced in advisory RHSA-2009:0376. Adobe Reader allows users to view and print documents in Portable Document Format PDF. Multiple input validation flaws were discovered in the JBIG2 compressed images decoder used by Adobe Reader. A malicious PDF file could...

SUSE: Security Advisory for acroread (SUSE-SA:2009:014)

The remote host is missing updates announced in advisory SUSE-SA:2009:014. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

openSUSE 10 Security Update : acroread (acroread-6120)

Multiple flaws in the JBIG2 decoder and the JavaScript engine of the Adobe Reader allowed attackers to crash acroread or even execute arbitrary code by tricking users into opening specially crafted PDF files. CVE-2009-0658, CVE-2009-0927, CVE-2009-0193, CVE-2009-0928, CVE-2009-1061, CVE-2009-1062...

CVE-2009-0928

CVE-2009-0928 is a heap-based buffer overflow in the JBIG2 decoder of Adobe Reader/Acrobat that can allow remote code execution via a PDF containing a JBIG2 stream with a size inconsistency. The connected advisories/patches reference multiple vendors (Adobe, Red Hat RHSA-2009-0376, SuSE/SUSE NASL...

iDefense Security Advisory 03.24.09: Adobe Reader and Acrobat JBIG2 Encoded Stream Heap Overflow Vulnerability

iDefense Security Advisory 03.24.09 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 24, 2009 I. BACKGROUND Adobe Acrobat Reader/Acrobat are programs for viewing and editing Portable Document Format PDF documents. For more information, see the vendor's site found at the following link...

Adobe Acrobat和Reader JBIG2图形处理堆溢出漏洞

BUGTRAQ ID: 34229 CVECAN ID: CVE-2009-0928,CVE-2009-0193 Adobe Acrobat和Reader都是非常流行的PDF文件阅读器。 Adobe Acrobat和Reader在解析PDF文件中的JBIG2编码流时存在堆溢出漏洞。在解析JBIG2流的内容时，使用了表格中一个代表数值数目的32 位值来分配堆缓冲区，然后未经边界检查便使用文件中的值填充这个缓冲区，因此可能触发堆溢出。成功利用这个漏洞允许以当前登录用户的权限完全控制受影响的机器。 Adobe Acrobat 9 Adobe Acrobat 8 Adobe Acrobat 7....

Adobe Acrobat / Reader Buffer Overflow Vulnerability (APSA09-01) - Windows

Adobe Acrobat / Adobe Reader is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...