136 matches found
Gentoo Security Advisory GLSA 200807-04 (poppler)
The remote host is missing updates announced in advisory GLSA 200807-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Fedora 9 : poppler-0.8.1-2.fc9 (2008-7012)
Security fix: Add upstream patch for CVE-2008-2950 / oCERT-2008-007 - use of an uninitialized pointer to call free in Page::Page 454277 http://www.ocert.org/advisories/ocert-2008-007.html Bug fixes: Fix crash when reading QuadPoints 448516 Use static FTLibrary in CairoOutputDev, as dynamic may...
FreeBSD Ports: poppler
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: poppler
The remote host is missing an update to the system as announced in the referenced advisory. VID bc20510f-4dd4-11dd-93e7-0211d880e350 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Fedora 8 : poppler-0.6.2-2.fc8 (2008-7104)
Security fix: Add upstream patch for CVE-2008-2950 / oCERT-2008-007 - use of an uninitialized pointer to call free in Page::Page 454277 http://www.ocert.org/advisories/ocert-2008-007.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
Security fix for the ALT Linux 5 package poppler5 version July
July 29, 2008 Sergey V Turchin 0.8.5-alt1 - new version - built with zlib - CVE-2008-2950...
[Full-disclosure] #2008-007 libpoppler uninitialized pointer - POC
hi. I was in doubt about releasing this because of there is no official patch. I suppose at this point anyone could accomplish the same thing so, again I'm in doubt. A friend once told me that if in doubt take your pants off. I've already tried that and I didn't earn no resolution to my conflict...
CVE-2008-2950
creationtimestamp| type| source ---|---|--- 2008-07-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6032...
CVE-2008-2950
The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document...
CVE-2008-2950
The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document...
CVE-2008-2950
CVE-2008-2950 affects libpoppler (Page destructor in Page.cc) and allows remote code execution through a crafted PDF when a pageWidgets object is deleted without proper initialization. Public references show impact across older Poppler versions (e.g., 0.8.4 and earlier); several distributions iss...
CVE-2008-2950
The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document...
CVE-2007-2950
CVE-2007-2950 involves Centennial Discovery 2006 Feature Pack 1 (used by Numara Asset Manager 8.0 and Symantec Discovery 6.5) where insecure default directory/file permissions enable local non-privileged users to gain privileges. The Symantec advisory notes the vulnerability arises from improper ...
CVE-2006-2950
Net Portal Dynamic System NPDS 5.10 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 header.php, 2 contact.php, or 3 forumextender.php, which reveals the path in an error message...
CVE-2006-2950
NPDS 5.10 and earlier is affected. An information-disclosure vulnerability allows remote attackers to obtain sensitive information by directly requesting one of three PHP files (header.php, contact.php, forum_extender.php), causing an error message that reveals file paths. The issue is a disclosu...