Fedora Update for tetex FEDORA-2007-750

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Design/Logic Flaw

Microsoft XML Core Services, as used in Microsoft Expression Web, Office, Internet Explorer 6 and 7, and other products, does not properly restrict access from web pages to Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via...

CVE-2008-4033

creationtimestamp| type| source ---|---|--- 2008-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7196...

Microsoft XML Core Services传输编码跨域信息泄露漏洞（MS08-069）

BUGTRAQ ID: 32204 CVECAN ID: CVE-2008-4033 Microsoft XML Core Services（MSXML）允许使用JScript、VBScript和Visual Studio 6.0的用户开发基于XML的应用，以与其他遵循XML 1.0标准的应用程序交互操作。 Microsoft XML Core Services处理传输编码头的方式中存在一个信息泄露漏洞。如果用户浏览包含特制内容的网站或打开特制HTML电子邮件，此漏洞可能允许读取另一个Internet Explorer域中的网页的数据。 Microsoft XML Core Servic...

CVE-2008-4033

CVE-2008-4033 is a cross-domain information disclosure vulnerability in Microsoft XML Core Services (MSXML) versions 3.0 through 6.0, affecting multiple products that embed MSXML (including Expression Web, Office, and Internet Explorer). The issue involves improper handling of HTTP header fields ...

MS08-069: Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (955218)

The remote host is running a version of Windows that contains a flaw in the Windows XML Core Services. An attacker may be able to execute arbitrary code on the remote host by constructing a malicious script and enticing a victim to visit a website or view a specially crafted email message. C...

Microsoft XML Core Services Chunked Request (MS08-069; CVE-2008-4033)

MSXML is an application for processing Extensible Stylesheet Language Transformation in an XML file that allows programmers to create high-performance XML-based applications. An information disclosure vulnerability has been reported in Microsoft XML Core Services MSXML. The vulnerability is due t...

Gentoo Security Advisory GLSA 200805-13 (ptex)

The remote host is missing updates announced in advisory GLSA 200805-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200710-12 (t1lib)

The remote host is missing updates announced in advisory GLSA 200710-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200805-13 (ptex)

The remote host is missing updates announced in advisory GLSA 200805-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200711-34 (cstetex)

The remote host is missing updates announced in advisory GLSA 200711-34. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

SuSE 10 Security Update : t1lib (ZYPP Patch Number 4588)

A buffer overflow in t1lib could potentially be exploited to execute arbitrary code via specially crafted files. CVE-2007-4033 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Fedora 7 : tetex-3.0-40.3.fc7 (2007-3390)

fix t1lib flaw CVE-2007-4033 352271 - fix CVE-2007-4352 CVE-2007-5392 CVE-2007-5393, various xpdf flaws 345121 - xdvi won't segfault if DVI file contains character which is not present in font 243630 - fix dvips -z buffer overflow with long href CVE-2007-5935 368591 - fix insecure usage of...

Fedora 8 : tetex-3.0-44.3.fc8 (2007-3308)

fix t1lib flaw CVE-2007-4033 352271 - fix CVE-2007-4352 CVE-2007-5392 CVE-2007-5393, various xpdf flaws 345121 - fix dvips -z buffer overflow with long href CVE-2007-5935 368591 - fix insecure usage of temporary file in dviljk CVE-2007-5936 CVE-2007-5937 368611, 368641 Note that Tenable Network...

Mandrake Linux Security Advisory : tetex (MDKSA-2007:230)

A flaw in the t1lib library where an attacker could create a malicious file that would cause tetex to crash or possibly execute arbitrary code when opened CVE-2007-4033. Alin Rad Pop found several flaws in how PDF files are handled in tetex. An attacker could create a malicious PDF file that woul...

xpdf security update

CentOS Errata and Security Advisory CESA-2007:1031-01 Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based...

RHEL 4 / 5 : tetex (RHSA-2007:1027)

Updated tetex packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX takes a text file and a set of formatting...

RHEL 3 : xpdf (RHSA-2007:1030)

Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based viewer for Portable Document Format PDF files. Alin Rad P...

Important: tetex security update

2.0.2-22.0.1.EL4.10 - fix t1lib flaw CVE-2007-4033 356691 Resolves: 356691 2.0.2-22.0.1.EL4.9 - fix CVE-2007-4352 CVE-2007-5392 CVE-2007-5393, various xpdf flaws 356691 Resolves: 356691...

openSUSE 10 Security Update : t1lib (t1lib-4592)

A buffer overflow in t1lib could potentially be exploited to execute arbitrary code via specially crafted files CVE-2007-4033. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update t1lib-4592. The...