[SECURITY] Fedora 26 Update: mupdf-1.10a-4.fc26

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

About the security content of macOS Sierra 10.12.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

SAP NetWeaver Log Viewer Security Bypass Vulnerability

SAP NetWeaver is the German SAP SAP company developed a set of service-oriented integrated application platform. The platform can provide a development and operation environment for SAP applications. A security bypass vulnerability exists in SAP NetWeaver. A remote attacker could exploit the...

SAP 3D Visual Enterprise Author, Generator and Viewer Unspecified Memory Corruption Vulnerability

SAP 3D Visual Enterprise Author, Generator and Viewer are products of SAP. The SAP 3D Visual Enterprise Viewer VEV is a suite of software for viewing, zooming, panning and rotating interactive 3D data as well as playing step-by-step animations. The SAP 3D Visual Enterprise Author, Generator and...

[SECURITY] Fedora 24 Update: mupdf-1.10a-4.fc24

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

CVE-2016-9169

A reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell GroupWise before 2014 R2 Support Pack 1 Hot Patch 2 that may enable a remote attacker to execute JavaScript in the context of a valid user's browser session by getting the user to click on a specially...

Cross site scripting

A reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell GroupWise before 2014 R2 Support Pack 1 Hot Patch 2 that may enable a remote attacker to execute JavaScript in the context of a valid user's browser session by getting the user to click on a specially...

CVE-2016-9169

A reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell GroupWise before 2014 R2 Support Pack 1 Hot Patch 2 that may enable a remote attacker to execute JavaScript in the context of a valid user's browser session by getting the user to click on a specially...

CVE-2016-9169

A reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell GroupWise before 2014 R2 Support Pack 1 Hot Patch 2 that may enable a remote attacker to execute JavaScript in the context of a valid user's browser session by getting the user to click on a specially...

CVE-2016-9169

The vulnerability CVE-2016-9169 affects the web console of the Document Viewer Agent in Novell GroupWise (older than 2014 R2 Support Pack 1 Hot Patch 2). It is a reflected XSS where a remote attacker can entice a user to click a crafted link, enabling JavaScript execution in the user’s browser se...

openjpeg: Heap overflow in parsing of JPEG2000 precincts

An integer overflow, leading to a heap buffer overflow, was found in openjpeg, also affecting the PDF viewer in Chromium. A specially crafted JPEG2000 image could cause an incorrect calculation when allocating precinct data structures, which could lead to a crash, or potentially, code execution...

openjpeg: heap overflow in parsing of JPEG2000 code blocks

An integer overflow, leading to a heap buffer overflow, was found in openjpeg, also affecting the PDF viewer in Chromium. A specially crafted JPEG2000 image could cause an incorrect calculation when allocating memory for code blocks, which could lead to a crash, or potentially, code execution...

openjpeg: heap overflow due to unsafe use of opj_aligned_malloc

An integer overflow, leading to a heap buffer overflow, was found in openjpeg, also affecting the PDF viewer in Chromium. A specially crafted JPEG2000 image could cause incorrect calculations when allocating various data structures, which could lead to a crash, or potentially, code execution...

Memory Corruption Vulnerability in PSD Image Processing by Universal Viewer

Universal Picture Viewer is an image viewing tool. Universal Picture Viewer has a memory corruption vulnerability when dealing with PSD format images, which allows an attacker to construct a malformed PSD format that can cause the program to crash, and if successfully exploited, can lead to...

Memory Corruption Vulnerability in PCX Image Processing by Universal Viewer

Universal Picture Viewer is an image viewing tool. Universal Picture Viewer has a memory corruption vulnerability when dealing with PCX-format pictures, which allows an attacker to construct a malformed PCX format that can cause the program to crash, and if successfully exploited, can lead to...

Memory Corruption Vulnerability in ICO Image Processing by Universal Viewer

Universal Picture Viewer is an image viewing tool. Universal Picture Viewer has a memory corruption vulnerability when dealing with ICO format images, which allows an attacker to construct a malformed ICO format that can cause the program to crash, and if successfully exploited, can lead to...

Memory Corruption Vulnerability in BMP Image Processing by Universal Viewer

Universal Picture Viewer is an image viewing tool. Universal Picture Viewer has a memory corruption vulnerability when dealing with BMP format images, which allows an attacker to construct a malformed BMP format that can cause the program to crash, and if successfully exploited, can lead to...

openjpeg: heap overflow in parsing of JPEG2000 code blocks

An integer overflow, leading to a heap buffer overflow, was found in openjpeg, also affecting the PDF viewer in Chromium. A specially crafted JPEG2000 image could cause an incorrect calculation when allocating memory for code blocks, which could lead to a crash, or potentially, code execution...

Memory Corruption Vulnerability in GIF Image Processing by Universal Picture Viewer

Universal Picture Viewer is a picture viewing software. Universal Picture Viewer has a memory corruption vulnerability when dealing with GIF format images, which allows an attacker to construct a malformed GIF format that can cause the program to crash, and if successfully exploited, can lead to...

Memory corruption

Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...