Information Disclosure

firefox is vulnerable to information disclosure. The vulnerability exists through a heap-based buffer overflow in mozilla::gfx::CopyRect...

CVE-2019-10022

An issue was discovered in Xpdf 4.01.01. There is a NULL pointer dereference in the function Gfx::opSetExtGState in Gfx.cc...

Null pointer dereference

An issue was discovered in Xpdf 4.01.01. There is a NULL pointer dereference in the function Gfx::opSetExtGState in Gfx.cc...

CVE-2019-10022

An issue was discovered in Xpdf 4.01.01. There is a NULL pointer dereference in the function Gfx::opSetExtGState in Gfx.cc...

Xpdf Null Pointer Dereference Vulnerability

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. A null pointer dereference vulnerability exists in the Gfx::opSetExtGState function in Gfx.cc in Xpdf 4.01.01. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2019-10022

CVE-2019-10022 affects Xpdf 4.01.01 and is caused by a NULL pointer dereference in Gfx::opSetExtGState (Gfx.cc). Multiple connected sources (SUSE, CNVD, UBUNTU, NVD, etc.) consistently describe the vulnerability as a NULL pointer dereference in that function. The issue is documented across severa...

CVE-2019-10022

An issue was discovered in Xpdf 4.01.01. There is a NULL pointer dereference in the function Gfx::opSetExtGState in Gfx.cc...

CVE-2019-10022: NULL Pointer Dereference

An issue was discovered in Xpdf 4.01.01. There is a NULL pointer dereference in the function Gfx::opSetExtGState in Gfx.cc...

PT-2019-11294

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.01.01 Description: A NULL pointer dereference issue was found in the function Gfx::opSetExtGState in Gfx.cc. Recommendations: For Xpdf version 4.01.01, at the moment, there is no information about a newer version that contains ...

DEBIAN-CVE-2018-18897

An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo...

UBUNTU-CVE-2018-18897

An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo...

poppler/pdf_fuzzer: Stack-buffer-overflow in IdentityFunction::transform

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5728547742679040 Project: poppler Fuzzer: aflpopplerpdffuzzer Fuzz target...

CVE-2018-18456

The function Object::isName in Object.h called from Gfx::opSetFillColorN in Xpdf 4.00 allows remote attackers to cause a denial of service stack-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

DEBIAN-CVE-2018-18456

The function Object::isName in Object.h called from Gfx::opSetFillColorN in Xpdf 4.00 allows remote attackers to cause a denial of service stack-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

DEBIAN-CVE-2018-18455

The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

UBUNTU-CVE-2018-18456

The function Object::isName in Object.h called from Gfx::opSetFillColorN in Xpdf 4.00 allows remote attackers to cause a denial of service stack-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18456

The function Object::isName in Object.h called from Gfx::opSetFillColorN in Xpdf 4.00 allows remote attackers to cause a denial of service stack-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

ImageMagick: Security hardening

Background ImageMagick is a collection of tools and libraries for many image formats. Description If you process an image with ImageMagick and don’t validate the file before e.g. check magic byte, ImageMagick will call any coders found in the given file. So if ImageMagick will find Ghostscript fo...

firefox security update

60.2.0-1.0.1 - fix LDLIBRARYPATH - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one 60.2.0-1 - Update to 60.2.0 ESR 60.1.0-9 - Do not set user agent rhbz1608065 - GTK dialogs are localized now rhbz1619373 - JNLP association works again rhbz1607457 60.1.0-8 - Fixed...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris (CNVD-2019-30951)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A security vulnerability exists in the NVIDIA-GFX Kernel driver subcomponent of the Solaris version 11.3 component of the Oracle Sun Systems Products...