Lucene search
K

67 matches found

RedhatCVE
RedhatCVE
added 2019/02/27 12:49 p.m.24 views

CVE-2019-9200

A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impa...

8.8CVSS5.1AI score0.03473EPSS
Exploits1References2
Prion
Prion
added 2019/02/26 11:29 p.m.20 views

Heap overflow

A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impa...

6.8CVSS9.2AI score0.03473EPSS
Exploits1References12Affected Software3
NVD
NVD
added 2019/02/26 11:29 p.m.23 views

CVE-2019-9200

A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impa...

8.8CVSS7.5AI score0.03473EPSS
Exploits1References12
Cvelist
Cvelist
added 2019/02/26 11:0 p.m.21 views

CVE-2019-9200

A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impa...

7.4AI score0.03473EPSS
Exploits1References12
CVE
CVE
added 2019/02/26 11:0 p.m.242 views

CVE-2019-9200

CVE-2019-9200: A heap-based buffer underwrite in ImageStream::getLine() (Stream.cc) in Poppler 0.74.0 can be triggered by a crafted PDF sent to pdfimages, leading to Denial of Service (segmentation fault) or possibly other impact. Connected advisories enumerate the issue across affected packages,...

8.8CVSS7.2AI score0.03473EPSS
Exploits1References12Affected Software1
UbuntuCve
UbuntuCve
added 2019/02/26 12:0 a.m.22 views

CVE-2019-9200

A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impa...

8.8CVSS7AI score0.03473EPSS
Exploits1References4
OSV
OSV
added 2019/02/26 12:0 a.m.2 views

UBUNTU-CVE-2019-9200

A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impa...

8.8CVSS7.3AI score0.03473EPSS
Exploits1References5
exploitpack
exploitpack
added 2019/01/15 12:0 a.m.14 views

ownDMS 4.7 - SQL Injection

ownDMS 4.7 - SQL Injection Exploit Title: ownDMS 4.7 - SQL Injection Dork: N/A Date: 2019-01-15 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.owndms.com/ Software Link: https://datapacket.dl.sourceforge.net/project/owndms/owndms47.zip Version: 4.7 Category: Webapps Tested on:...

0.3AI score
Exploits0
RedHat Linux
RedHat Linux
added 2018/03/28 2:6 p.m.6 views

atomic-openshift: image import whitelist can be bypassed by creating an imagestream or using oc tag

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed...

5.3CVSS5.8AI score0.00991EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2017/10/09 3:19 p.m.31 views

CVE-2017-14617

In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files...

7.8CVSS3.1AI score0.00944EPSS
Exploits0References1
CNVD
CNVD
added 2017/09/21 12:0 a.m.2 views

Unspecified Vulnerability in Poppler Stream.cc File

Poppler is a C++ class library for generating PDF, the library is inherited from Xpdf PDF reader. A security vulnerability exists in the ImageStream class of the Stream.cc file in Poppler version 0.59.0. No details of the vulnerability are provided at this time...

7.8CVSS6.9AI score0.00944EPSS
Exploits0References1
Prion
Prion
added 2017/09/20 9:29 p.m.24 views

Authentication flaw

In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files...

6.8CVSS7.3AI score0.00944EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2017/09/20 9:29 p.m.1 views

DEBIAN-CVE-2017-14617

In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files...

7.8CVSS7.7AI score0.00944EPSS
Exploits0References1
NVD
NVD
added 2017/09/20 9:29 p.m.15 views

CVE-2017-14617

In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files...

7.8CVSS6.2AI score0.00944EPSS
Exploits0References1
CVE
CVE
added 2017/09/20 9:0 p.m.77 views

CVE-2017-14617

Poppler 0.59.0 contains a floating point exception in ImageStream (Stream.cc) that can be triggered by processing crafted PDFs, potentially enabling an attack via malicious files. The CVE-2017-14617 issue is acknowledged in multiple advisories (e.g., openSUSE SUSE-2018-648) with fixes in subseque...

7.8CVSS5.5AI score0.00944EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2017/09/20 9:0 p.m.27 views

CVE-2017-14617

In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files...

5.6AI score0.00944EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2017/09/20 9:0 p.m.31 views

CVE-2017-14617

In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files...

7.8CVSS7.7AI score0.00944EPSS
Exploits0
OSV
OSV
added 2017/09/20 12:0 a.m.0 views

UBUNTU-CVE-2017-14617

In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files...

7.8CVSS6.7AI score0.00944EPSS
Exploits0References3
CNVD
CNVD
added 2017/09/19 12:0 a.m.1 views

Linux PDF rendering engine poppler suffers from a denial of service vulnerability

Poppler is used to generate a PDF of the C++ class library , from xpdf inheritance. Linux PDF rendering engine poppler Stream.cc ImageStream::ImageStream there is a denial-of-service vulnerability. Attackers can use this vulnerability to launch denial-of-service attacks...

6.9AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2010/10/08 12:0 a.m.34 views

RHEL 4 : cups (RHSA-2010:0755)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0755 advisory. - xpdf/poppler: ImageStream::ImageStream integer overflow CVE-2009-3609 - xpdf: uninitialized Gfx::parser pointer dereference CVE-2010-3702...

7.5CVSS6.7AI score0.04483EPSS
Exploits1References6
Rows per page
Query Builder