CVE-2007-2349

Cross-site scripting XSS vulnerability in Invision Power Board IP.Board 2.1.x and 2.2.x allows remote attackers to inject arbitrary web script or HTML by uploading crafted images or PDF files...

Foxit Reader畸形PDF文件拒绝服务漏洞

Foxit Reader是一款PDF文档阅读软件。 Foxit Reader处理畸形PDF文件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 攻击者可以通过构建包含恶意PDF文件的WEB页，诱使用户通过Opera或者Internet exploer访问而使应用程序崩溃。 Foxit 2.0 目前没有解决方案提供： http://www.foxitsoftware.com/pdf/rdintro.php / Created Friday, April 20 2007 Moderator of http://igniteds.net Foxit Reader 2.0 for...

ClamAV antivirus multiple vulnerabilities

Buffer overflow on CAB files parsing, DoS on CHM parsing. PDF files parsing descriptors leak...

Microsoft Malware Protection integer overflow

Integer overflow on PDF files parsing...

Adobe reader plugin PDF files universal crossite scripting

By using URIs like http://path/to/pdf/file.pdfwhatevernameyouwant=javascript:yourcodehere it's possible to execute code in context of any Web site where at least one PDF is stored. 2. By using "trigger action" in PDF document it's possible to execute code in context of the web page where...

CentOS 4 : gpdf (CESA-2006:0177)

An updated gpdf package that fixes several security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. gpdf is a GNOME based viewer for Portable Document Format PDF files. Chris Evans...

CVE-2006-1787

Adobe Document Server for Reader Extensions 6.0 includes a user's session jsession ID in the HTTP Referer header, which allows remote attackers to gain access to PDF files that are being processed within that session...

Session fixation

Adobe Document Server for Reader Extensions 6.0 includes a user's session jsession ID in the HTTP Referer header, which allows remote attackers to gain access to PDF files that are being processed within that session...

CVE-2006-1787

Adobe Document Server for Reader Extensions 6.0 includes a user's session jsession ID in the HTTP Referer header, which allows remote attackers to gain access to PDF files that are being processed within that session...

Mandrake Linux Security Advisory : kdegraphics (MDKSA-2006:054)

Marcelo Ricardo Leitner discovered the official published kpdf patches for several previous xpdf vulnerabilities were lacking some hunks published by upstream xpdf. As a result, kpdf is still vulnerable to certain carefully crafted pdf files. Although previous updates captured most of these...

GLSA-200603-02 : teTeX, pTeX, CSTeX: Multiple overflows in included XPdf code

The remote host is affected by the vulnerability described in GLSA-200603-02 teTeX, pTeX, CSTeX: Multiple overflows in included XPdf code CSTeX, teTex, and pTeX include XPdf code to handle PDF files. This XPdf code is vulnerable to several heap overflows GLSA 200512-08 as well as several buffer a...

RHEL 4 : xpdf (RHSA-2006:0201)

An updated xpdf package that fixes a buffer overflow security issue is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The xpdf package is an X Window System-based viewer for Portable Document Format PDF files. A heap based buff...

GLSA-200602-05 : KPdf: Heap based overflow

The remote host is affected by the vulnerability described in GLSA-200602-05 KPdf: Heap based overflow KPdf includes Xpdf code to handle PDF files. Dirk Mueller discovered that the Xpdf code is vulnerable a heap based overflow in the splash rasterizer engine. Impact : An attacker could entice a...

Important: Red Hat Security Advisory: xpdf security update

An updated xpdf package that fixes a buffer overflow security issue is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The xpdf package is an X Window System-based viewer for Portable Document Format PDF files. A heap based buff...

GLSA-200601-17 : Xpdf, Poppler, GPdf, libextractor, pdftohtml: Heap overflows

The remote host is affected by the vulnerability described in GLSA-200601-17 Xpdf, Poppler, GPdf, libextractor, pdftohtml: Heap overflows Chris Evans has reported some integer overflows in Xpdf when attempting to calculate buffer sizes for memory allocation, leading to a heap overflow and a...

security flaw

Multiple heap-based buffer overflows in the 1 DCTStream::readProgressiveSOF and 2 DCTStream::readBaselineSOF functions in the DCT stream parsing code Stream.cc in xpdf 3.01 and earlier, as used in products such as a Poppler, b teTeX, c KDE kpdf, d pdftohtml, e KOffice KWord, f CUPS, and g...

Ubuntu 4.10 : xpdf vulnerabilities (USN-14-1)

Markus Meissner discovered even more integer overflow vulnerabilities in xpdf, a viewer for PDF files. These integer overflows can eventually lead to buffer overflows. The Common UNIX Printing System CUPS uses the same code to print PDF files; tetex-bin uses the code to generate PDF output and...

Ubuntu 4.10 : xpdf vulnerabilities (USN-2-1)

Chris Evans discovered several integer overflow vulnerabilities in xpdf, a viewer for PDF files. The Common UNIX Printing System CUPS also uses the same code to print PDF files. In either case, these vulnerabilities could be exploited by an attacker by providing a specially crafted PDF file which...

Ubuntu 4.10 : xpdf, cupsys vulnerabilities (USN-64-1)

A buffer overflow has been found in the xpdf viewer. An insufficient input validation of the encryption key length could be exploited by an attacker providing a specially crafted PDF file which, when processed by xpdf, could result in abnormal program termination or the execution of attacker...

Fedora Core 4 : poppler-0.4.4-1.1 (2006-026)

Chris Evans discovered several flaws in the way poppler processes PDF files. An attacker could construct a carefully crafted PDF file that could cause poppler to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the names CVE-2005-3624...