Visagesoft eXPert PDF ViewerX (VSPDFViewerX.ocx) File Overwrite

No description provided by source. VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail: marcotorti2atyahoodotcom than...

Visagesoft eXPert PDF Viewer ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31984 CNCAN ID：CNCAN-2008103007 Visagesoft eXPert PDF Viewer是一款PDF阅读器插件。 Visagesoft eXPert PDF Viewer控件存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 VSPDFViewerX.ocx控件对savePageAsBitmap"方法对用户提供的参数缺少过滤，构建恶意WEB页，诱使用户访问，可导致以应用程序权限覆盖系统文件。 Visagesoft eXPert PDF Viewer ActiveX 3.0.990 目前没有详细解决方案提供：...

visagesoft-overwrite.txt

VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail: marcotorti2atyahoodotcom thanks UGIS FileVersion: 3.0.990.0 CLSI...

Visagesoft eXPert PDF ViewerX - VSPDFViewerX.ocx File Overwrite

Visagesoft eXPert PDF ViewerX - VSPDFViewerX.ocx File Overwrite VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail:...

GLSA-200807-04 : Poppler: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200807-04 Poppler: User-assisted execution of arbitrary code Felipe Andres Manzano reported a memory management issue in the Page class constructor/destructor. Impact : A remote attacker could entice a user to open a specially...

Poppler: User-assisted execution of arbitrary code

Background Poppler is a cross-platform PDF rendering library originally based on Xpdf. Description Felipe Andres Manzano reported a memory management issue in the Page class constructor/destructor. Impact A remote attacker could entice a user to open a specially crafted PDF file with a...

Foxit Reader Detection

Foxit Reader, a free PDF file viewer, is installed on the remote Windows host. C Tenable, Inc. include"compat.inc"; if description scriptid32395; scriptversion"1.22"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/07/09"; scriptxrefname:"IAVT", value:"0001-T-0605";...

CentOS 4 : kdegraphics (CESA-2008:0238)

Updated kdegraphics packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop Environment, including kpd...

GLSA-200804-18 : Poppler: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200804-18 Poppler: User-assisted execution of arbitrary code Kees Cook from the Ubuntu Security Team reported that the CairoFont::create function in the file CairoFontEngine.cc does not verify the type of an embedded font object...

Debian Security Advisory DSA 1357-1 (kdegraphics)

The remote host is missing an update to kdegraphics announced via advisory DSA 1357-1. OpenVAS Vulnerability Test $Id: deb13571.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1357-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1354-1 (gpdf)

The remote host is missing an update to gpdf announced via advisory DSA 1354-1. OpenVAS Vulnerability Test $Id: deb13541.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1354-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1355-1 (kdegraphics)

The remote host is missing an update to kdegraphics announced via advisory DSA 1355-1. OpenVAS Vulnerability Test $Id: deb13551.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1355-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1349-1 (libextractor)

The remote host is missing an update to libextractor announced via advisory DSA 1349-1. OpenVAS Vulnerability Test $Id: deb13491.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1349-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1350-1 (tetex-bin)

The remote host is missing an update to tetex-bin announced via advisory DSA 1350-1. OpenVAS Vulnerability Test $Id: deb13501.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1350-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1352-1 (pdfkit.framework)

The remote host is missing an update to pdfkit.framework announced via advisory DSA 1352-1. OpenVAS Vulnerability Test $Id: deb13521.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1352-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1347-1 (xpdf)

The remote host is missing an update to xpdf announced via advisory DSA 1347-1. OpenVAS Vulnerability Test $Id: deb13471.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1347-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1214-1 (gv)

The remote host is missing an update to gv announced via advisory DSA 1214-1. Renaud Lifchitz discovered that gv, the PostScript and PDF viewer for X, performs insufficient boundary checks in the Postscript parsing code, which allows the execution of arbitrary code through a buffer overflow...

Debian: Security Advisory (DSA-1357-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-982-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1008-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...