2269 matches found
CVE-2009-3605
Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF file, related to 1 glib/poppler-page.cc; 2 ArthurOutputDev.cc, 3 CairoOutputDev.cc, 4 GfxState.cc, 5 JBIG2Stream.cc, ...
CVE-2009-3605
CVE-2009-3605 is a Poppler vulnerability affecting Poppler 0.10.5 and earlier, described as multiple integer overflows that can be triggered by a crafted PDF. The advisory details indicate affected components within Poppler (glib/poppler-page.cc; ArthurOutputDev.cc; CairoOutputDev.cc; GfxState.cc...
CVE-2009-3607
Integer overflow in the createsurfacefromthumbnaildata function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of the...
SLES10: Security update for poppler
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: poppler poppler-glib poppler-qt More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...
SLES10: Security update for poppler
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: poppler poppler-glib poppler-qt More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...
SLES10: Security update for dbus
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: dbus-1 dbus-1-devel dbus-1-glib dbus-1-gtk dbus-1-java dbus-1-mono dbus-1-python dbus-1-qt3 dbus-1-qt3-devel dbus-1-x11 More details may also be found by...
SLES10: Security update for poppler
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: poppler poppler-glib poppler-qt More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...
SLES10: Security update for NetworkManager
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: NetworkManager NetworkManager-devel NetworkManager-glib More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked i...
SLES11: Security update for NetworkManager
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: NetworkManager NetworkManager-glib More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at...
USN-841-1: GLib vulnerability
Arand Nash discovered that applications linked to GLib e.g. Nautilus did not correctly copy symlinks. If a user copied symlinks with GLib, the symlink target files would become world-writable, allowing local attackers to gain access to potentially sensitive information...
glib library privilege escalation
gfilecopy function sets symbolic link's permission if source file is copied by symbolic link...
GNOME glib库g_file_copy函数不安全文件权限设置漏洞
CVE ID: CVE-2009-3289 GLib是GTK+和GNOME工程的基础底层核心程序库，是一个综合用途的轻量级的C程序库。 glib库gfilecopy函数将目标文件的权限设置为了符号链接的权限（777），这允许本地用户修改其他用户的文件。 GNOME glib 2.0 厂商补丁： GNOME ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.gnome.org/...
Directory traversal
The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...
DEBIAN-CVE-2009-3289
The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...
CVE-2009-3289
The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...
CVE-2009-3289
The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...
CVE-2009-3289
The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...
CVE-2009-3289
CVE-2009-3289 affects glib2.0: the g_file_copy function sets the target file permissions to 0777 when copying symbolic links, enabling user-assisted local modification of other users’ files. Affected software is glib2.0 (glib 2.0); several OS advisories reference fixes bundled with glib2 updates ...
CVE-2009-3289
The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...
CVE-2009-3289
The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...