Lucene search
K

101 matches found

Cvelist
Cvelist
added 2021/04/28 1:44 p.m.12 views

CVE-2021-3508

A flaw was found in PDFResurrect in version 0.22b. There is an infinite loop in getxreflinearskipped in pdf.c via a crafted PDF file...

6.4AI score0.00762EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2021/04/28 1:44 p.m.13 views

CVE-2021-3508

A flaw was found in PDFResurrect in version 0.22b. There is an infinite loop in getxreflinearskipped in pdf.c via a crafted PDF file...

5.5CVSS5.2AI score0.00762EPSS
Exploits1
CNNVD
CNNVD
added 2021/04/28 12:0 a.m.4 views

PDFResurrect 安全漏洞

PDFResurrect is a tool for extracting or cleaning version data from PDF documents. A security vulnerability exists in PDFResurrect versions prior to 0.22b, which stems from an infinite loop in pdf.c via a carefully crafted PDF file getxreflinearskipped...

5.5CVSS5.7AI score0.00762EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2020/12/07 12:0 a.m.23 views

Fedora 33 : pdfresurrect (2020-e9f9bb77a0)

PDFresurrect 0.21 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...

7.8CVSS7.2AI score0.01046EPSS
Exploits1References2
Mageia
Mageia
added 2020/12/05 7:46 p.m.32 views

Updated pdfresurrect package fixes security vulnerability

In PDFResurrect before 0.20, lack of header validation checks causes a heap-buffer-overflow in pdfgetversion CVE-2020-20740...

7.8CVSS1.4AI score0.01046EPSS
Exploits1References3
OSV
OSV
added 2020/12/05 7:46 p.m.6 views

MGASA-2020-0449 Updated pdfresurrect package fixes security vulnerability

In PDFResurrect before 0.20, lack of header validation checks causes a heap-buffer-overflow in pdfgetversion CVE-2020-20740...

7.8CVSS7.5AI score0.01046EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2020/12/05 12:0 a.m.19 views

Fedora: Security Advisory for pdfresurrect (FEDORA-2020-e9f9bb77a0)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.7AI score0.01046EPSS
Exploits1References2
Fedora
Fedora
added 2020/12/04 7:52 p.m.23 views

[SECURITY] Fedora 33 Update: pdfresurrect-0.21-1.fc33

PDFResurrect is a tool aimed at analyzing PDF documents. The PDF format allows for previous document changes to be retained in a more recent version of the document, thereby creating a running history of changes for the document. This tool attempts to extract all previous versions while also...

7.8CVSS0.5AI score0.01046EPSS
Exploits1
OpenVAS
OpenVAS
added 2020/12/04 12:0 a.m.15 views

Fedora: Security Advisory for pdfresurrect (FEDORA-2020-92195be0e2)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.7AI score0.01046EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/12/03 12:0 a.m.31 views

Fedora 32 : pdfresurrect (2020-92195be0e2)

PDFresurrect 0.21 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...

7.8CVSS7.2AI score0.01046EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/12/02 12:0 a.m.34 views

Debian DLA-2475-1 : pdfresurrect security update

Vulnerabilities have been discovered in pdfresurrect, a tool for analyzing and manipulating revisions to PDF documents. CVE-2019-14934 pdfloadpageskids in pdf.c doesn't validate a certain size value, which leads to a malloc failure and out-of-bounds write CVE-2020-20740 lack of header validation...

7.8CVSS7.1AI score0.01123EPSS
Exploits1References5
OpenVAS
OpenVAS
added 2020/12/02 12:0 a.m.15 views

Debian: Security Advisory (DLA-2475-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.01123EPSS
Exploits1References4
Debian
Debian
added 2020/12/01 1:6 p.m.41 views

[SECURITY] [DLA 2475-1] pdfresurrect security update

Debian LTS Advisory DLA-2475-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez December 01, 2020 https://wiki.debian.org/LTS Package : pdfresurrect Version : 0.12-6+deb9u1 CVE ID : CVE-2019-14934 CVE-2020-20740 Vulnerabilities have been discovered in...

7.8CVSS7.1AI score0.01123EPSS
Exploits1
OSV
OSV
added 2020/12/01 12:0 a.m.22 views

DLA-2475-1 pdfresurrect - security update

Bulletin has no description...

7.8CVSS7.4AI score0.01123EPSS
Exploits1
Ubuntu
Ubuntu
added 2020/11/24 12:22 a.m.76 views

USN-4642-1: PDFResurrect vulnerability

It was discovered that PDFResurrect incorrectly handled certain memory operations during PDF summary generation. An attacker could use this to cause out-of-bounds writes, resulting in a denial of service system crash or arbitrary code execution...

7.8CVSS7.6AI score0.01337EPSS
Exploits1
OSV
OSV
added 2020/11/24 12:22 a.m.2 views

USN-4642-1 pdfresurrect vulnerability

It was discovered that PDFResurrect incorrectly handled certain memory operations during PDF summary generation. An attacker could use this to cause out-of-bounds writes, resulting in a denial of service system crash or arbitrary code execution...

7.8CVSS7.3AI score0.01337EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2020/11/24 12:0 a.m.15 views

Ubuntu: Security Advisory (USN-4642-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.01337EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/11/24 12:0 a.m.32 views

Ubuntu 16.04 LTS : PDFResurrect vulnerability (USN-4642-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4642-1 advisory. It was discovered that PDFResurrect incorrectly handled certain memory operations during PDF summary generation. An attacker could use this to cause out-of-bounds...

7.8CVSS7.7AI score0.01337EPSS
Exploits1References2
CNVD
CNVD
added 2020/11/23 12:0 a.m.18 views

PDFResurrect Heap Buffer Overflow Vulnerability

PDFResurrect is a tool for analyzing PDF documents to help extract old "hidden" versions of pdf from the current pdf. pdfgetversion in versions prior to PDFResurrect 0.20 has a heap buffer overflow vulnerability. . The vulnerability stems from a lack of header validation checks in PDFResurrect. N...

7.8CVSS2.8AI score0.01046EPSS
Exploits1References1
NVD
NVD
added 2020/11/20 7:15 p.m.15 views

CVE-2020-20740

PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdfgetversion...

7.8CVSS7.6AI score0.01046EPSS
Exploits1References5
Rows per page
Query Builder