SUSE Security Announcement: binutils,kdelibs3,kdegraphics3,koffice,dia,lyx (SUSE-SA:2006:007)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUSE Security Announcement Package: binutils,kdelibs3,kdegraphics3,koffice,dia,lyx Announcement ID: SUSE-SA:2006:007 Date: Fri, 10 Feb 2006 15:00:00 +0000 Affected Products: Novell Linux Desktop 9 SUSE LINUX 10.0 SUSE LINUX 9.3 SUSE LINUX 9.2 SUSE LIN...

Ubuntu 4.10 / 5.04 / 5.10 : xpdf/cupsys/tetex-bin/kdegraphics/koffice vulnerabilities (USN-227-1)

infamous41md discovered several integer overflows in the XPDF code, which is present in xpdf, the Poppler library, tetex-bin, KOffice, and kpdf. By tricking an user into opening a specially crafted PDF file, an attacker could exploit this to execute arbitrary code with the privileges of the...

Mandrake Linux Security Advisory : koffice (MDKSA-2005:185)

Chris Evans reported a heap based buffer overflow in the RTF importer of KWord. An attacker could provide a specially crafted RTF file, which when opened in KWord can cause execution of arbitrary code. The updated packages are patched to deal with these issues. %NASLMINLEVEL 70300 C Tenable Netwo...

Mandrake Linux Security Advisory : koffice (MDKSA-2006:008)

Multiple heap-based buffer overflows in the DCTStream::readProgressiveSOF and DCTStream::readBaselineSOF functions in the DCT stream parsing code Stream.cc in xpdf 3.01 and earlier, allow user-complicit attackers to cause a denial of service heap corruption and possibly execute arbitrary code via...

Ubuntu 5.04 : koffice vulnerability (USN-202-1)

Chris Evans discovered a buffer overflow in the RTF import module of KOffice. By tricking a user into opening a specially crafted RTF file, an attacker could exploit this to execute arbitrary code with the privileges of the AbiWord user. Note that Tenable Network Security has extracted the...

[SECURITY] [DSA 938-1] New koffice packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 938-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 938-1] New koffice packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 938-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2006 http://www.debian.org/security/faq -...

DSA-938-1 koffice - buffer overflows

Bulletin has no description...

KPdf, KWord: Multiple overflows in included Xpdf code

Background KPdf is a KDE-based PDF viewer included in the kdegraphics package. KWord is a KDE-based word processor also included in the koffice package. Description KPdf and KWord both include Xpdf code to handle PDF files. This Xpdf code is vulnerable to several heap overflows GLSA 200512-08 as...

CVE-2005-3192

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as 1 Poppler, 2 teTeX, 3 KDE kpdf, and 4 pdftohtml, 5 KOffice KWord, 6 CUPS, and 7 libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps number o...

CVE-2005-3192

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as 1 Poppler, 2 teTeX, 3 KDE kpdf, and 4 pdftohtml, 5 KOffice KWord, 6 CUPS, and 7 libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps number o...

Slackware 10.0 / 10.1 / 10.2 / 9.1 / current : KOffice/KWord (SSA:2005-310-02)

New KOffice packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue with KWord. A buffer overflow in the RTF import functionality could result in the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

[slackware-security] KOffice/KWord

New KOffice packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue with KWord. A buffer overflow in the RTF import functionality could result in the execution of arbitrary code. More details about this issue may be found in the Common Vulnerabilities and...

[SECURITY] [DSA 872-1] New koffice packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 872-1 [email protected] http://www.debian.org/security/ Martin Schulze October 26th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 872-1] New koffice packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 872-1 [email protected] http://www.debian.org/security/ Martin Schulze October 26th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2971

Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file...

CVE-2005-2971

Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file...

CVE-2005-2971

Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file...

CVE-2005-2971

CVE-2005-2971 : Heap-based buffer overflow in the KWord RTF importer of KOffice 1.2.0–1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file. Root cause: buffer overflow in the importer. Affected software is the KWord component of KOffice; multiple advisories (e.g., Debian...

Fedora Core 3 : koffice-1.4.2-0.FC3.2 (2005-984)

Tue Oct 11 2005 Than Ngo 4:1.4.2-0.FC3.2 - remove security fix which is included in new 1.4.2 upstream - Thu Sep 29 2005 Than Ngo 4:1.4.2-0.FC3.1 - update to 1.4.2 - apply upstream patch to fix CVE-2005-2971 kword buffer overflow 169486 Note that Tenable Network Security has extracted the...