Debian DSA-2050-1 : kdegraphics - several vulnerabilities

Several local vulnerabilities have been discovered in KPDF, a PDF viewer for KDE, which allow the execution of arbitrary code or denial of service if a user is tricked into opening a crafted PDF document. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

DSA-2050-1 kdegraphics - several vulnerabilities

Bulletin has no description...

xpdf: Freeing of potentially uninitialized memory in JBIG2 decoder

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service crash via a crafted PDF file that triggers a free of uninitialized memory...

Researcher: 'MS Should Have Simple PDF Viewer'

Microsoft should add a basic PDF viewer to Windows to help protect users from the spike in attacks exploiting bugs in Adobe’s Reader, said a security researcher. Read the full article. Computerworld...

Foxit Reader < 3.2.1 Arbitrary Program Execution

The version of Foxit Reader installed on the remote Windows host is prior to 3.2.1. It is, therefore, affected by an arbitrary program execution vulnerability related to certain '/Type /Action /S /Launch' or '/Launch /Action' sequences. An attacker can exploit these, by tricking a user into openi...

Adobe Reader Libtiff TIFFFetchShortPair Stack Buffer Overflow

Added: 03/22/2010 CVE: CVE-2010-0188 BID: 38195 OSVDB: 62526 Background Adobe Reader is free software for viewing PDF documents. Problem A stack buffer overflow vulnerability allows command execution when a user opens a PDF file with an embedded TIFF image that has one of several fields encoded a...

PDF-XChange Viewer/PDF-XChange PDF File Handling Memory Corruption

A version of PDF-XChange Viewer, PDF-XChange PDF Viewer SDK or PDF-XChange installed on the remote host fails to validate input while opening certain specially crafted PDF files. By tricking users into opening a malicious PDF file, a remote attacker could exploit this flaw to execute arbitrary co...

Secunia Research: PDF-XChange Viewer Content Parsing Memory Corruption Vulnerability

====================================================================== Secunia Research 04/01/2010 - PDF-XChange Viewer Content Parsing Memory Corruption Vulnerability - ====================================================================== Table of Contents Affected...

xpdf: buffer overflow in FoFiType1::parse

The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a...

Xpdf Splash DrawImage Integer Overflow (CVE-2009-3604)

Xpdf is an open source PDF viewer for the Unix-like operating systems and works under the X Window graphical user interface system. An integer overflow vulnerability has been reported in Xpdf. The vulnerability is caused by an error in the Xpdf due to lack of input validation when handling images...

MuPDF pdf_shade4.c Multiple Stack-Based Buffer Overflows

No description provided by source. "MuPDF is a lightweight PDF viewer and toolkit written in portable C". It is used in particular by SumatraPDF which is a small open-source PDF viewer for Windows. MuPDF before commit 20091125231942 did not properly handle /Decode arrays in a shading of type 4 to...

MuPDF 20091125231942 - pdf_shade4.c Multiple Stack Buffer Overflows

MuPDF 20091125231942 - pdfshade4.c Multiple Stack Buffer Overflows "MuPDF is a lightweight PDF viewer and toolkit written in portable C". It is used in particular by SumatraPDF which is a small open-source PDF viewer for Windows. MuPDF before commit 20091125231942 did not properly handle /Decode...

MuPDF pdf_shade4.c Multiple Stack-Based Buffer Overflows

Exploit for unknown platform in category local exploits ======================================================== MuPDF pdfshade4.c Multiple Stack-Based Buffer Overflows ======================================================== Title: MuPDF pdfshade4.c Multiple Stack-Based Buffer Overflows CVE-ID:...

CVE-2009-3604

The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted P...

Xpdf 3.01 - Local Heap Overflow / Null Pointer Dereference

Name: Xpdf - Integer overflow which causes heap overflow and NULL pointer derefernce Author: Adam Zabrocki / HISPASEC or Date: July 06, 2009 Issue: Xpdf allows local and remote attackers to overflow buffer on heap via integer overflow vulnerability. Xpdf is prone to NULL pointer dereference attac...

xpdf security update

CentOS Errata and Security Advisory CESA-2009:1501 An updated xpdf package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System based...

Edraw PDF Viewer ActiveX Control Insecure Method Vulnerability

This host is installed with Edraw PDF Viewer ActiveX Control and is prone to Insecure Method vulnerability. OpenVAS Vulnerability Test $Id: secpodedrawpdfvieweractvxctrlvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Edraw PDF Viewer ActiveX Control Insecure Method Vulnerability Authors: Sharath S...

Edraw PDF Viewer ActiveX Control Insecure Method Vulnerability

Edraw PDF Viewer ActiveX Control is prone to Insecure Method vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Insecure method vulnerability in the PDFVIEWER.PDFViewerCtrl.1 ActiveX control pdfviewer.ocx in Edraw PDF Viewer Component before 3.2.0.126 allows remote attackers to create and overwrite arbitrary files via a URL argument to the FtpConnect argument and a target filename argument to the...

CVE-2009-2169

Insecure method vulnerability in the PDFVIEWER.PDFViewerCtrl.1 ActiveX control pdfviewer.ocx in Edraw PDF Viewer Component before 3.2.0.126 allows remote attackers to create and overwrite arbitrary files via a URL argument to the FtpConnect argument and a target filename argument to the...