[SECURITY] Fedora 26 Update: libmwaw-0.3.11-3.fc26

libmwaw is a library for import of old Mac documents. It supports many kinds of text documents, spreadsheets, databases, vector and bitmap images. Supported are, for example, documents created by BeagleWorks, ClarisWorks, MacPaint, MacWrite or Microsoft Word for Mac. A full list of supported...

CVE-2017-9602

KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-management component. An unauthenticated user can access the file upload and deletion functionality. Through this functionality, a user can upload an ASPX script to...

USN-3319-1 libmwaw vulnerability

It was discovered that libmwaw incorrectly handled certain malformed document files. If a user or automated system were tricked into opening a specially crafted file, a remote attacker could cause libmwaw to crash, resulting in a denial of service, or possibly execute arbitrary code...

[SECURITY] Fedora 26 Update: libstaroffice-0.0.3-3.fc26

libstaroffice is a library for import of binary StarOffice documents...

[SECURITY] [DSA 3875-1] libmwaw security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3875-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 09, 2017 https://www.debian.org/security/faq -...

Fedora 25 : poppler (2017-690eedcf41)

CVE-2017-7511 poppler: NULL pointer dereference in pdfunite via crafted documents Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2017-7511

poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents...

Null pointer dereference

poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents...

CVE-2017-7511

poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents...

DEBIAN-CVE-2017-7511

poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents...

CVE-2017-7511

poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents...

CVE-2017-7511

poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents...

CVE-2017-7511

poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents...

PT-2017-17781 · Poppler +2 · Poppler +2

Name of the Vulnerable Software and Affected Versions: poppler versions 0.17.3 and later Description: The issue is related to a NULL pointer dereference in the pdfunite component of poppler, triggered by specially crafted documents. Recommendations: For poppler versions 0.17.3 and later, at the...

CVE-2017-7511

poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents...

Tainted Leaks

Last year, I wrote about the potential for doxers to alter documents before they leaked them. It was a theoretical threat when I wrote it, but now Citizen Lab has documented this technique in the wild: This report describes an extensive Russia-linked phishing and disinformation campaign. It...

CVE-2014-0225

When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references in a DTD declaration. This enabled an XXE attack...

CVE-2014-0225

When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references in a DTD declaration. This enabled an XXE attack...

Metadata Anonymisation Toolkit Information Disclosure Vulnerability

Metadata Anonymisation Toolkit MAT is a metadata anonymization toolkit. The toolkit supports the anonymization or deletion of metadata such as Word documents, images and music files. An information disclosure vulnerability exists in MAT versions 0.6 and 0.6.1. An attacker can exploit this...

LVRTC eParakstitajs 3 and edoc-libraries arbitrary file write vulnerability

LVRTC eParakstitajs 3 and edoc-libraries are both products of the Latvian company LVRTC. The former is an electronic signature solution for insurance use; the latter is a file system for specially created and produced EDOC documents. An arbitrary file write vulnerability exists in LVRTC...