85 matches found
Foxit Reader < 9.3 Multiple Vulnerabilities
The version of Foxit Reader installed on the remote Windows host is prior to 9.3. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid118093; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...
CVE-2018-3994
CVE-2018-3994 affects Foxit PDF Reader 9.2.0.9297, where a use-after-free in the JavaScript engine can be triggered by a specially crafted PDF document. This may allow arbitrary code execution when a user opens the malicious file; the browser plugin extension context could also trigger the vulner...
CVE-2018-3994
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the...
Foxit Reader and PhantomPDF Multiple Use After Free Vulnerabilities (CVE-2018-3940; CVE-2018-3941; CVE-2018-3942; CVE-2018-3943; CVE-2018-3944; CVE-2018-3945; CVE-2018-3946)
A remote code execution vulnerability exists in Foxit Reader and PhantomPDF. The vulnerability is due to a use-after-free error while handling a specially crafted PDF file. Successful exploitation could lead to arbitrary code execution. Additional CVEs: CVE-2018-3957, CVE-2018-3958, CVE-2018-3959...
Debian DSA-3994-1 : nautilus - security update
Christian Boxdorfer discovered a vulnerability in the handling of FreeDesktop.org .desktop files in Nautilus, a file manager for the GNOME desktop environment. An attacker can craft a .desktop file intended to run malicious commands but displayed as a innocuous document file in Nautilus. An user...
Fedora 24 : imlib2 (2016-ad6005ba92)
A new upstream update fixing several vulnerabilities. See the bug list for more information. ---- Rebase to the new upstream bugfix-only version. Add security fixes for the referenced bugs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
Fedora 22 : imlib2 (2016-b4212484d5)
A new upstream update fixing several vulnerabilities. See the bug list for more information. ---- Rebase to the new upstream bugfix-only version. Add security fixes for the referenced bugs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
openSUSE Security Update : imlib2 (openSUSE-2016-600)
This imlib2 update to version 1.4.9 fixes the following issues : Security issues fixed : - CVE-2011-5326: divide by 0 when drawing an ellipse of height 1 boo974202 - CVE-2014-9762: segmentation fault on images without colormap boo963796 - CVE-2014-9764: segmentation fault when opening specificall...
CVE-2016-3994
The GIF loader in imlib2 before 1.4.9 allows remote attackers to cause a denial of service application crash or obtain sensitive information via a crafted image, which triggers an out-of-bounds read...
CVE-2016-3994
The CVE-2016-3994 issue affects the GIF loader in imlib2 up to version 1.4.9, caused by an out-of-bounds read that can lead to a denial of service (application crash) or exposure of sensitive information. A fix is available in upstream imlib2 1.4.9 and related security updates (e.g., Ubuntu/Fedor...
imlib2: multiple issues
CVE-2011-5326 denial of service Kevin Ryde discovered that attempting to draw a 2x1 radi ellipse results in a floating point exception. - CVE-2016-3993 information leakage Yuriy M. Kaminskiy discovered that drawing using coordinates from an untrusted source could lead to an out-of-bound memory...
Debian DSA-3555-1 : imlib2 - security update
Several vulnerabilities were discovered in imlib2, an image manipulation library. - CVE-2011-5326 Kevin Ryde discovered that attempting to draw a 2x1 radi ellipse results in a floating point exception. - CVE-2014-9771 It was discovered that an integer overflow could lead to invalid memory reads a...
[SECURITY] [DSA 3555-1] imlib2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3555-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini April 23, 2016 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3555-1 (imlib2 - security update)
Several vulnerabilities were discovered in imlib2, an image manipulation library. CVE-2011-5326 Kevin Ryde discovered that attempting to draw a 2x1 radi ellipse results in a floating point exception. CVE-2014-9771 It was discovered that an integer overflow could lead to invalid memory reads and...
Fedora 23 : imlib2-1.4.8-1.fc23 (2016-f8eee2e628)
Rebase to the new upstream bugfix-only version. Add security fixes for the referenced bugs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
CVE-2015-3994
CVE-2015-3994 affects SAP HANA DB (XS Engine) version 1.00.73.00.389160 (NewDB100_REL). The vulnerability resides in the grant.xsfunc application under testApps/grantAccess/, where remote authenticated attackers can spoof log entries via a crafted HTTP request. The issue is described as an improp...
Fedora Update for python-djblets FEDORA-2014-7224
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for python-djblets FEDORA-2014-7223
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : python-djblets-0.7.30-2.fc19 (2014-7224)
Fixes two XSS vulnerabilities in Djblets used by Review Board Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...