CVE-2012-5007

The Fill PDF module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to write to arbitrary PDF files via unspecified vectors related to the fillpdfmergepdf function and incorrect arguments, a different vulnerability than CVE-2012-1625. NOTE: some of these details are obtained from third...

CVE-2012-5007

The CVE-2012-5007 entry concerns the Drupal Fill PDF module (7.x-1.x before 7.x-1.2; also 6.x-1.x paths in related CVEs). Affected component/function: fillpdf_merge_pdf, with unspecified vectors and incorrect arguments that allow remote attackers to write to arbitrary PDF files. The root cause an...

CentOS Update for ghostscript CESA-2012:1256 centos6

Check for the Version of ghostscript OpenVAS Vulnerability Test CentOS Update for ghostscript CESA-2012:1256 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

MyAgent Trojan Targets Defense and Aerospace Industries

FireEye Security experts are analyzing a targeted trojan that leverages emailed PDF files to gain access to systems and deliver its payload to specified networks in the aerospace, chemical, defense and tech industries. "We have seen different versions of this malware arriving as an exe inside a...

Scientific Linux Security Update : gpdf on SL4.x i386/x86_64

Problem description : Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause gpdf to crash, or potentially execute arbitrary code when opened. CVE-2007-4352, CVE-2007-5392, CVE-2007-5393 %NASLMINLEVEL 70300 C Tenable...

Scientific Linux Security Update : cups on SL5.x, SL4.x, SL3.x i386/x86_64

Maurycy Prodeus discovered an integer overflow flaw in the way CUPS processes PDF files. An attacker could create a malicious PDF file that could potentially execute arbitrary code when printed. CVE-2007-3387 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientifi...

Scientific Linux Security Update : kdegraphics on SL5.x, SL4.x i386/x86_64

Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause kpdf to crash, or potentially execute arbitrary code when opened. CVE-2007-4352, CVE-2007-5392, CVE-2007-5393 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : cups on SL5.x, SL4.x, SL3.x i386/x86_64

Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause CUPS to crash or potentially execute arbitrary code when printed. CVE-2007-4352, CVE-2007-5392, CVE-2007-5393 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : tetex on SL5.x, SL4.x, SL3.x i386/x86_64

Maurycy Prodeus discovered an integer overflow flaw in the processing of PDF files. An attacker could create a malicious PDF file that would cause TeTeX to crash or potentially execute arbitrary code when opened. CVE-2007-3387 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Scientific Linux Security Update : cups on SL4.x i386/x86_64

Problem description : Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause CUPS to crash or potentially execute arbitrary code when printed. CVE-2007-4352, CVE-2007-5392, CVE-2007-5393 Alin Rad Pop discovered a flaw in ...

Scientific Linux Security Update : poppler on SL5.x i386/x86_64

Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause an application linked with poppler to crash, or potentially execute arbitrary code when opened. CVE-2007-4352, CVE-2007-5392, CVE-2007-5393 %NASLMINLEVEL 70300 C...

CentOS Update for ghostscript CESA-2012:0095 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Google Chrome < 20.0.1132.43 Multiple Vulnerabilities

Binary data 800967.prm...

SuSE 11.1 Security Update : Acrobat Reader (SAT Patch Number 6138)

Specially crafted PDF files could have caused a denial of service or have lead to the execution of arbitrary code in the context of the user running acroread : - crafted fonts inside PDFs could allow attackers to cause an integer overflow, resulting in the possibility of arbitrary code execution...

Low: Red Hat Security Advisory: ImageMagick security and bug fix update

Updated ImageMagick packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

RedHat Update for ImageMagick RHSA-2012:0301-03

Check for the Version of ImageMagick OpenVAS Vulnerability Test RedHat Update for ImageMagick RHSA-2012:0301-03 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

RHEL 4 : ghostscript (RHSA-2012:0096)

Updated ghostscript packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Adobe Acrobat and Reader U3D CLODMeshDeclaration Memory Corruption (CVE-2009-2994)

A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an index boundary error while handling specially crafted PDF files. A remote attacker may exploit this vulnerability by enticing unsuspecting users to open a malicious PDF document with an...

Soda PDF Professional 1.2.155 Denial Of Service

!/usr/bin/perl Soda PDF Professional 1.2.155 PDF/WWF File Handling Restriction of Service RoS Vendor: LULU software Product web page: http://www.sodapdf.com Affected version: 1.2.155.1729 Professional with OCR Summary: Increase your efficiency with Soda PDF Professional, the smart & simple tool f...

#DefCon 19 : Presentations from the Defcon Conference for Download

DefCon 19 : Presentations from the Defcon Conference for Download Defcon 19 presentations available for download, Go check out the presentations from this year's defcon conference here: https://good.net/dl/k4r3lj/DEFCON19/ For folks that don't have time to click: curl -silent...