1634 matches found
security flaw
Multiple heap-based buffer overflows in the 1 DCTStream::readProgressiveSOF and 2 DCTStream::readBaselineSOF functions in the DCT stream parsing code Stream.cc in xpdf 3.01 and earlier, as used in products such as a Poppler, b teTeX, c KDE kpdf, d pdftohtml, e KOffice KWord, f CUPS, and g...
DEBIAN-CVE-2005-3193
Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code JPXStream.c for xpdf 3.01 and earlier, as used in products such as 1 Poppler, 2 teTeX, 3 KDE kpdf, 4 CUPS, and 5 libextractor allows user-assisted attackers to cause a denial of service heap...
xpdf security update
CentOS Errata and Security Advisory CESA-2005:670 An updated xpdf package that fixes a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The xpdf package is an X Window System-based...
security flaw
xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service disk consumption and hang via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information...
security flaw
xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service disk consumption and hang via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information...
security flaw
xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service disk consumption and hang via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information...
security flaw
Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such a...
PT-2005-1334 · Biborb · Biborb
Name of the Vulnerable Software and Affected Versions: BibORB versions 1.3.2 and earlier Description: The issue is related to the improper enforcement of a restriction for uploading only PDF and PS files. This allows remote attackers to upload arbitrary files, which are then presented to other...
security flaw
Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PD...
security flaw
Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PD...
security flaw
Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PD...
security flaw
Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PD...
RHEL 2.1 / 3 : xpdf (RHSA-2004:592)
An updated xpdf package that fixes a number of integer overflow security flaws is now available. Xpdf is an X Window System based viewer for Portable Document Format PDF files. During a source code audit, Chris Evans and others discovered a number of integer overflow bugs that affected all versio...
DEBIAN-CVE-2002-1569
gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for 1 a PDF file or 2 a gzip file...