1042 matches found
CVE-2008-4919
Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control VSPDFViewerX.ocx 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method...
Security feature bypass
Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control VSPDFViewerX.ocx 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method...
CVE-2008-4919
Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control VSPDFViewerX.ocx 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method...
CVE-2008-4919
Product affected: Visagesoft eXPert PDF Viewer ActiveX Control (VSPDFViewerX.ocx) 3.0.990.0. Vulnerability: ActiveX Control based file overwrite vulnerability that allows a remote attacker to overwrite arbitrary files by supplying a full pathname to the savePageAsBitmap method. Root cause / vecto...
Visagesoft eXPert PDF ViewerX (VSPDFViewerX.ocx) File Overwrite
No description provided by source. VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail: marcotorti2atyahoodotcom than...
Visagesoft eXPert PDF Viewer ActiveX控件任意文件覆盖漏洞
BUGTRAQ ID: 31984 CNCAN ID：CNCAN-2008103007 Visagesoft eXPert PDF Viewer是一款PDF阅读器插件。 Visagesoft eXPert PDF Viewer控件存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 VSPDFViewerX.ocx控件对savePageAsBitmap"方法对用户提供的参数缺少过滤，构建恶意WEB页，诱使用户访问，可导致以应用程序权限覆盖系统文件。 Visagesoft eXPert PDF Viewer ActiveX 3.0.990 目前没有详细解决方案提供：...
visagesoft-overwrite.txt
VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail: marcotorti2atyahoodotcom thanks UGIS FileVersion: 3.0.990.0 CLSI...
Visagesoft eXPert PDF ViewerX - VSPDFViewerX.ocx File Overwrite
Visagesoft eXPert PDF ViewerX - VSPDFViewerX.ocx File Overwrite VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail:...
GLSA-200807-04 : Poppler: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200807-04 Poppler: User-assisted execution of arbitrary code Felipe Andres Manzano reported a memory management issue in the Page class constructor/destructor. Impact : A remote attacker could entice a user to open a specially...
Poppler: User-assisted execution of arbitrary code
Background Poppler is a cross-platform PDF rendering library originally based on Xpdf. Description Felipe Andres Manzano reported a memory management issue in the Page class constructor/destructor. Impact A remote attacker could entice a user to open a specially crafted PDF file with a...
Foxit Reader Detection
Foxit Reader, a free PDF file viewer, is installed on the remote Windows host. C Tenable, Inc. include"compat.inc"; if description scriptid32395; scriptversion"1.22"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/07/09"; scriptxrefname:"IAVT", value:"0001-T-0605";...
GLSA-200804-18 : Poppler: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200804-18 Poppler: User-assisted execution of arbitrary code Kees Cook from the Ubuntu Security Team reported that the CairoFont::create function in the file CairoFontEngine.cc does not verify the type of an embedded font object...
CentOS 4 : kdegraphics (CESA-2008:0238)
Updated kdegraphics packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop Environment, including kpd...
Debian Security Advisory DSA 1355-1 (kdegraphics)
The remote host is missing an update to kdegraphics announced via advisory DSA 1355-1. OpenVAS Vulnerability Test $Id: deb13551.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1355-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-1008-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-982-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-1243-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-179)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1214-1 (gv)
The remote host is missing an update to gv announced via advisory DSA 1214-1. Renaud Lifchitz discovered that gv, the PostScript and PDF viewer for X, performs insufficient boundary checks in the Postscript parsing code, which allows the execution of arbitrary code through a buffer overflow...
Debian Security Advisory DSA 1357-1 (kdegraphics)
The remote host is missing an update to kdegraphics announced via advisory DSA 1357-1. OpenVAS Vulnerability Test $Id: deb13571.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1357-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...