CVE-2016-0058

Buffer overflow in the PDF Library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote attackers to execute arbitrary code via a crafted PDF document that triggers API calls, aka "Microsoft PDF Library Buffer Overflow Vulnerability."...

Microsoft Windows PDF Library Remote Code Execution Vulnerabilities (3138938)

This host is missing a critical security update according to Microsoft Bulletin MS16-012 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

All Versions of Windows affected by Critical Security Vulnerability

Microsoft has released 13 security bulletins, six of which are considered to be critical, resolving a total of 41 security vulnerabilities in its software this month. Every Windows version Affected: One of the critical vulnerabilities affects all supported version of Windows, including Microsoft'...

Microsoft Windows PDF Library CVE-2016-0058 Buffer Overflow Vulnerability

Description Microsoft Windows PDF library is prone to a buffer-overflow vulnerability because it fails to adequately bounds check user-supplied data before copying it to an insufficiently sized memory buffer.. An attacker can leverage this issue to execute arbitrary code in the context of the...

Microsoft Windows PDF Library Buffer Overflow (MS16-012; CVE-2016-0058)

A buffer overflow vulnerability exists in Microsoft Windows PDF Library. The vulnerability is due to improper handling of application programming interface API calls. A remote attacker can exploit this issue by enticing a target user to open a specially crafted file...

MS16-012: Security update for Microsoft Windows PDF Library to address remote code execution: February 9, 2016

Resolves vulnerabilities in Windows that could allow remote code execution if Microsoft Windows PDF Library incorrectly handles application programming interface API calls. This could allow an attacker to run arbitrary code on the user’s system.SummaryThis security update resolves vulnerabilities...

MS16-012: Description of the security update for Windows PDF Library: February 9, 2016

Resolves vulnerabilities in Windows that could allow remote code execution if Microsoft Windows PDF Library incorrectly handles application programming interface API calls. This could allow an attacker to run arbitrary code on the user’s system.SummaryThis security update resolves vulnerabilities...

MS16-012: Security Update for Microsoft Windows PDF Library to Address Remote Code Execution (3138938)

The remote Windows host is missing a security update. It is, therefore, affected by multiple code execution vulnerabilities : - A remote code execution vulnerability exists in Windows Reader. An attacker can exploit this, by convincing a user to open a specially crafted file, to execute arbitrary...

Debian Security Advisory DSA 2050-1 (kdegraphics)

The remote host is missing an update to kdegraphics announced via advisory DSA 2050-1. OpenVAS Vulnerability Test $Id: deb20501.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2050-1 kdegraphics Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

DSA-2050-1 kdegraphics - several vulnerabilities

Bulletin has no description...

Mandriva Linux Security Advisory : poppler (MDVSA-2010:055)

An out-of-bounds reading flaw in the JBIG2 decoder allows remote attackers to cause a denial of service crash via a crafted PDF file CVE-2009-0799. Multiple input validation flaws in the JBIG2 decoder allows remote attackers to execute arbitrary code via a crafted PDF file CVE-2009-0800. An integ...

Ubuntu Update for koffice vulnerability USN-603-2

Ubuntu Update for Linux kernel vulnerabilities USN-603-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN6032.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for koffice vulnerability USN-603-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for poppler vulnerability USN-603-1

Ubuntu Update for Linux kernel vulnerabilities USN-603-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6031.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for poppler vulnerability USN-603-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Mandrake Security Advisory MDVSA-2009:068-1 (poppler)

The remote host is missing an update to poppler announced via advisory MDVSA-2009:068-1. OpenVAS Vulnerability Test $Id: mdksa20090681.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:068-1 poppler Authors: Thomas Reinke Copyright: Copyright c 2009...

USN-603-1: poppler vulnerability

It was discovered that the poppler PDF library did not correctly handle certain malformed embedded fonts. If a user or an automated system were tricked into opening a malicious PDF, a remote attacker could execute arbitrary code with user privileges...

DSA-1480-1 poppler - several vulnerabilities

Bulletin has no description...

Haru Free PDF Library HPDF_Page_Circle缓冲区溢出漏洞

HARU是一款免费的的跨平台函数库，用于生成PDF。 HARU在处理畸形的PDF数据时存在漏洞，远程攻击者可能利用此漏洞导致HARU崩溃。 HARU的hpdfpageoperator.c文件中HPDFPageCircle函数所使用的缓冲区char bufHPDFTMPBUFSIZ没有正确地验证用户输入。如果用户受骗打开了特制的PDF文件的话，就可能触发缓冲区溢出，导致拒绝服务。 Takeshi Kanno Kanno Haru Free PDF Library = 2.0.7 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...