129 matches found
Fedora Core 11 FEDORA-2009-10845 (poppler)
The remote host is missing an update to poppler announced via advisory FEDORA-2009-10845. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...
Fedora 11 : poppler-0.10.7-3.fc11 (2009-10845)
This build addresses several recent security issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
CVE-2009-3607
CVE-2009-3607 affects Poppler (0.x) via an integer overflow in create_surface_from_thumbnail_data in glib/poppler-page.cc, leading to a heap-based buffer overflow and potential memory corruption that could allow arbitrary code execution when processing crafted PDFs. Various advisories (e.g., GLSA...
Poppler 'create_surface_from_thumbnail_data()'整数溢出漏洞
Bugraq ID: 36718 CVE ID：CVE-2009-3607 Poppler是一款用来生成PDF 的C++类库，从xpdf继承而来。 Poppler createsurfacefromthumbnaildata函数存在整数溢出，cairopixels缓冲区分配如下： cairopixels = guchar gmalloc 4 width height; 其中width / height值从PDF文件中读取，Page::loadThumb函数对值进行了一些验证，但是不能充分的防止溢出： if width INTMAX / 3 / height Poppler poppler...
CVE-2008-3607
CVE-2008-3607 affects NoticeWare Email Server NG (IMAP server) 4.6.3 and earlier. The IMAP service can be forced into a denial-of-service (daemon crash) by sending multiple long LOGIN commands. OpenVAS entries corroborate a Denial of Service vulnerability in NoticeWare Email Server NG LOGIN messa...
CVE-2008-3607
creationtimestamp| type| source ---|---|--- 2008-08-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32194...
CVE-2007-3607
Technical details of CVE-2007-3607 are not publicly provided in the supplied documents. Only a generic description of unspecified ActiveX control vulnerabilities affecting EnjoySAP SAP GUI is available; monitor for official updates.
CVE-2006-3607
The vulnerability CVE-2006-3607 affects Softbiz Banner Exchange Script (aka Banner Exchange Network Script) version 1.0. The issue is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML. Specifically, the city parameter in insertmember.php ...