[SECURITY] Fedora 19 Update: mupdf-1.1-5.fc19

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

Shadowbox Local File Inclusion

Author: TUNISIAN CYBER + Exploit Title: Shadowbox LFI Vulnerability + Date: 03-02-2014 + Category: WebApp + Google Dork: : + Tested on: KaliLinux + Vendor: http://shadowbox-js.com/ + Friendly Sites: na3il.com,th3-creative.com +Description: Shadowbox is a web-based media viewer application that...

CVE-2013-4979

Buffer overflow in the gldll32.dll module in EPS Viewer 3.2 and earlier allows remote attackers to execute arbitrary code via a crafted EPS file...

Buffer overflow

Buffer overflow in the gldll32.dll module in EPS Viewer 3.2 and earlier allows remote attackers to execute arbitrary code via a crafted EPS file...

CVE-2013-4979

Buffer overflow in the gldll32.dll module in EPS Viewer 3.2 and earlier allows remote attackers to execute arbitrary code via a crafted EPS file...

CVE-2013-4979

CVE-2013-4979 describes a buffer overflow in the gldll32.dll component of EPS Viewer (version 3.2 and earlier). The vulnerability can allow remote code execution when a user opens a specially crafted EPS file, as documented by multiple sources. Exploitation details and PoCs are outlined in Core S...

CVE-2013-2974

The BIRT viewer in IBM Tivoli Application Dependency Discovery Manager TADDM 7.2.1.x before 7.2.1.5 allows remote authenticated users to bypass authorization checks and obtain report-administration privileges, and consequently create or delete reports or conduct SQL injection attacks, via crafted...

Authorization

The BIRT viewer in IBM Tivoli Application Dependency Discovery Manager TADDM 7.2.1.x before 7.2.1.5 allows remote authenticated users to bypass authorization checks and obtain report-administration privileges, and consequently create or delete reports or conduct SQL injection attacks, via crafted...

CVE-2014-0810

CVE-2014-0810 affects JustSystems Sanshiro (2007–2010, with updates up to 3/5/6) and Sanshiro Viewer prior to 2.0.2.0. A crafted document could cause arbitrary code execution, as described in JVN entries. The vulnerability stems from unspecified flaws in the Sanshiro series that allow remote code...

JVN#28011378: Sanshiro Series vulnerable to arbitrary code execution

The "Sanshiro" series software provided by JustSystems Corporation is a spreadsheet software. The "Sanshiro" series contains a vulnerability that may allow arbitrary code execution. Impact When a user opens a specially crafted file, arbitrary code may be executed. Solution Update the software App...

CVE-2013-6434

The remote-viewer in Red Hat Enterprise Virtualization Manager RHEV-M before 3.3, when using a native SPICE client invocation method, initially makes insecure connections to the SPICE server, which allows man-in-the-middle attackers to spoof the SPICE server...

CVE-2014-0809

CVE-2014-0809 concerns Gapless Player’s Android app, SimZip (Simple Zip Viewer). The vulnerability is a directory traversal in processing file names that allows a remote, unauthenticated attacker to create or overwrite arbitrary files in the app’s accessible directories. Affected versions are Sim...

JVN#49384502: SimZip (Simple Zip Viewer) vulnerable to directory traversal

SimZip Simple Zip Viewer provided by Gapless Player contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Impact A remote, unauthenticated attacker may create an arbitrary file or overwrite an existing file in a directory that the application...

[Autopsy] Digital Investigation Analysis

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory...

rhev: remote-viewer spice tls-stripping issue

The remote-viewer in Red Hat Enterprise Virtualization Manager RHEV-M before 3.3, when using a native SPICE client invocation method, initially makes insecure connections to the SPICE server, which allows man-in-the-middle attackers to spoof the SPICE server...

CVE-2013-3483

Stack-based buffer overflow in ermapperu.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted ERS file...

Stack overflow

Stack-based buffer overflow in ermapperu.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted ERS file...

CVE-2013-3483

CVE-2013-3483 describes a stack-based buffer overflow in ermapper_u.dll of Intergraph ERDAS ER Viewer (pre-13.0.1.1301). The vulnerability can be triggered by a crafted ERS file, allowing remote code execution or a denial of service (application crash). Affected software is Intergraph ERDAS ER Vi...

CVE-2013-3482

The CVE-2013-3482 issue affects Intergraph ERDAS ER Viewer before 13.0.1.1301, where a stack-based buffer overflow in rf_report_error (ermapper_u.dll) can be triggered by a long string in an ERS file. This leads to potential arbitrary code execution or a denial of service (application crash). Pub...

CVE-2013-3482

Stack-based buffer overflow in the rfreporterror function in ermapperu.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a long string in an ERS file...