FreeBSD Ports: cups-base

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: xpdf, zh-xpdf, ja-xpdf, ko-xpdf

The remote host is missing an update to the system as announced in the referenced advisory. VID 0e43a14d-3f3f-11dc-a79a-0016179b2dd5 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Fedora 8 : poppler-0.6.2-2.fc8 (2008-7104)

Security fix: Add upstream patch for CVE-2008-2950 / oCERT-2008-007 - use of an uninitialized pointer to call free in Page::Page 454277 http://www.ocert.org/advisories/ocert-2008-007.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

[SECURITY] Fedora 8 Update: poppler-0.6.2-2.fc8

Poppler, a PDF rendering library, it's a fork of the xpdf PDF viewer developed by Derek Noonburg of Glyph and Cog, LLC...

poppler library DoS

Problem with PDF file widgets initialization...

[USN-631-1] poppler vulnerability

=========================================================== Ubuntu Security Notice USN-631-1 July 28, 2008 poppler vulnerability CVE-2008-2950 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 7.10 Ubuntu 8.04 LTS This...

Ubuntu 7.10 / 8.04 LTS : poppler vulnerability (USN-631-1)

Felipe Andres Manzano discovered that poppler did not correctly initialize certain page widgets. If a user were tricked into viewing a malicious PDF file, a remote attacker could exploit this to crash applications linked against poppler, leading to a denial of service. Note that Tenable Network...

USN-631-1: poppler vulnerability

Felipe Andres Manzano discovered that poppler did not correctly initialize certain page widgets. If a user were tricked into viewing a malicious PDF file, a remote attacker could exploit this to crash applications linked against poppler, leading to a denial of service...

Debian: Security Advisory (DSA-1606-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1606-1 (poppler)

The remote host is missing an update to poppler announced via advisory DSA 1606-1. OpenVAS Vulnerability Test $Id: deb16061.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1606-1 poppler Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

poppler-poc.txt

hi. I was in doubt about releasing this because of there is no official patch. I suppose at this point anyone could accomplish the same thing so, again I'm in doubt. A friend once told me that if in doubt take your pants off. I've already tried that and I didn't earn no resolution to my conflict...

[Full-disclosure] #2008-007 libpoppler uninitialized pointer - POC

hi. I was in doubt about releasing this because of there is no official patch. I suppose at this point anyone could accomplish the same thing so, again I'm in doubt. A friend once told me that if in doubt take your pants off. I've already tried that and I didn't earn no resolution to my conflict...

Debian DSA-1606-1 : poppler - programming error

It was discovered that poppler, a PDF rendering library, did not properly handle embedded fonts in PDF files, allowing attackers to execute arbitrary code via a crafted font object. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

GLSA-200807-04 : Poppler: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200807-04 Poppler: User-assisted execution of arbitrary code Felipe Andres Manzano reported a memory management issue in the Page class constructor/destructor. Impact : A remote attacker could entice a user to open a specially...

FreeBSD : poppler -- uninitialized pointer (bc20510f-4dd4-11dd-93e7-0211d880e350)

Felipe Andres Manzano reports : The libpoppler pdf rendering library, can free uninitialized pointers, leading to arbitrary code execution. This vulnerability results from memory management bugs in the Page class constructor/destructor. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] [DSA 1606-1] poppler packages fix execution of arbitrary code

------------------------------------------------------------------------ Debian Security Advisory DSA-1606-1 [email protected] http://www.debian.org/security/ Steve Kemp July 09, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[oCERT-2008-007] libpoppler uninitialized pointer

2008/07/07 2008-007 libpoppler uninitialized pointer Description: The poppler PDF rendering library suffers a memory management bug which leads to arbitrary code execution. The vulnerability is present in the Page class constructor/destructor. The pageWidgets object is not initialized in the Page...

DSA-1606-1 poppler - execution of arbitrary code

Bulletin has no description...

Poppler PDF渲染库页类远程代码执行漏洞

BUGTRAQ ID: 30107 CVE ID：CVE-2008-2950 CNCVE ID：CNCVE-20082950 Poppler是一款PDF渲染库。 Poppler PDF渲染库存在一个内存管理错误，远程攻击者可以利用漏洞以应用程序权限执行任意代码。 漏洞存在于页类构造/解构中，在特定条件下pageWidgets对象在页构造中不正确初始化，并在之后解构过程中没有检查是否初始化而直接删除，特殊构建的PDF文件可导致分配任意内存而触发此漏洞。可能导致以应用程序权限执行任意代码。 poppler 0.8.4 升级到最新版本： http://poppler.freedesktop.o...

CVE-2008-2950

The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document...