Fedora Core 4 : xpdf-3.00-20.FC4.2 (2005-729)

A flaw was discovered in Xpdf in that an attacker could construct a carefully crafted PDF file that would cause Xpdf to consume all available disk space in /tmp when opened. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-2097 to this issue. Users of xpdf should upgrad...

Fedora Core 3 : xpdf-3.00-10.6.FC3 (2005-730)

A flaw was discovered in Xpdf in that an attacker could construct a carefully crafted PDF file that would cause Xpdf to consume all available disk space in /tmp when opened. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-2097 to this issue. Users of xpdf should upgrad...

CVE-2005-2097

CVE-2005-2097 affects xpdf and variants such as gpdf (and related components like CUPS’ pdftops) where carefully crafted PDFs can cause a denial of service by exhausting disk space (creating a large temporary file). Public sources in the connected documents confirm heap-based overflows and DoS po...

CVE-2005-2097

xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service disk consumption and hang via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information...

RHEL 4 : gpdf (RHSA-2005:708)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:708 advisory. The gpdf package is an GNOME based viewer for Portable Document Format PDF files. Marcus Meissner reported a flaw in gpdf. An attacker could construct...

Moderate: Red Hat Security Advisory: gpdf security update

An updated gpdf package that fixes a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gpdf package is an GNOME based viewer for Portable Document Format PDF files. Marcus Meissn...

RHEL 4 : xpdf (RHSA-2005:670)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:670 advisory. The xpdf package is an X Window System-based viewer for Portable Document Format PDF files. A flaw was discovered in Xpdf in that an attacker could...

RHEL 4 : cups (RHSA-2005:706)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:706 advisory. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating systems. When processing a PDF file, bounds checking was n...

xpdf security update

CentOS Errata and Security Advisory CESA-2005:670 An updated xpdf package that fixes a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The xpdf package is an X Window System-based...

kdegraphics security update

CentOS Errata and Security Advisory CESA-2005:671 Updated kdegraphics packages that resolve a security issue in kpdf are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K...

Important: Red Hat Security Advisory: cups security update

Updated CUPS packages that fix a security issue are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating systems...

CVE-2002-2097

The compression code in MaraDNS before 0.9.01 allows remote attackers to cause a denial of service via crafted DNS packets...

CVE-2002-2097

The CVE-2002-2097 entry concerns MaraDNS prior to 0.9.01, where the compression code can be abused by remote attackers to cause a denial of service through specially crafted DNS packets. The confirmed affected component is MaraDNS’s compression routine, with impact described as a remote DoS. The ...

CVE-2004-2097

The CVE-2004-2097 entry applies to SuSE Linux 9.0 and describes a local-privilege issue where a symlink attack on several temporary files (e.g., /tmp/fvwm-bug, /tmp/wmmenu, /tmp/rates, /tmp/xf86debug.1.log, /tmp/.winpopup-new, /tmp/initrd) allows a local user to overwrite arbitrary files. The roo...