CVE-2009-0756

The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::JBIG2SymbolDict and triggers an invalid memory dereference...

CVE-2009-0755

The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file with an invalid Form Opt entry...

CVE-2009-0756

The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::JBIG2SymbolDict and triggers an invalid memory dereference...

Memory corruption

The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::JBIG2SymbolDict and triggers an invalid memory dereference...

Code injection

The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file with an invalid Form Opt entry...

CVE-2009-0755

CVE-2009-0755 affects the Poppler PDF rendering library. The FormWidgetChoice::loadDefaults function may crash a process when parsing a malformed PDF that contains an invalid Form Opt entry, enabling a remote denial-of-service condition. The issue is described as affecting Poppler up to version 0...

CVE-2009-0755

The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file with an invalid Form Opt entry...

CVE-2009-0756

The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::JBIG2SymbolDict and triggers an invalid memory dereference...

CVE-2009-0755

The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file with an invalid Form Opt entry...

CVE-2009-0756

CVE-2009-0756 affects Poppler prior to version 0.10.4, where JBIG2Stream::readSymbolDictSeg can trigger a parsing error in a PDF that is not properly handled by JBIG2SymbolDict::~JBIG2SymbolDict, leading to an invalid memory dereference and denial of service. SUSE and OpenVAS advisories mirror th...

Fedora Update for poppler FEDORA-2007-4031

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for poppler FEDORA-2007-4031

Check for the Version of poppler OpenVAS Vulnerability Test Fedora Update for poppler FEDORA-2007-4031 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for poppler FEDORA-2008-7012

Check for the Version of poppler OpenVAS Vulnerability Test Fedora Update for poppler FEDORA-2008-7012 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for poppler FEDORA-2008-7104

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for poppler FEDORA-2008-3312

Check for the Version of poppler OpenVAS Vulnerability Test Fedora Update for poppler FEDORA-2008-3312 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for poppler FEDORA-2008-7012

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for poppler FEDORA-2008-3312

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for poppler FEDORA-2008-7104

Check for the Version of poppler OpenVAS Vulnerability Test Fedora Update for poppler FEDORA-2008-7104 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Poppler PDF文件处理拒绝服务漏洞

BUGTRAQ ID: 33749 Poppler是一种解析PDF格式文档的程序库。 Poppler的FormWidgetChoice::loadDefaults和JBIG2Stream::readSymbolDictSeg函数中存在未初始化内存访问漏洞，如果用户受骗打开了特制的PDF文档的话，就会导致应用程序崩溃。 Poppler 0.10.4 厂商补丁： Poppler ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://poppler.freedesktop.org/...

Poppler 0.10.3 - Denial of Service

Poppler 0.10.3 - Denial of Service source: https://www.securityfocus.com/bid/33749/info Poppler is prone to multiple denial-of-service vulnerabilities when handling malformed PDF files. Successfully exploiting this issue allows remote attackers to crash applications that use the vulnerable librar...