313 matches found
security flaw
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 CVE-2004-0888 is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities...
security flaw
Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value...
security flaw
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 CVE-2004-0888 is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities...
security flaw
Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value...
GLSA-200501-30 : CUPS: Stack overflow in included Xpdf code
The remote host is affected by the vulnerability described in GLSA-200501-30 CUPS: Stack overflow in included Xpdf code The Decrypt::makeFileKey2 function in Xpdf's Decrypt.cc insufficiently checks boundaries when processing /Encrypt /Length tags in PDF files GLSA 200501-28. Impact : This issue...
Important: Red Hat Security Advisory: cups security update
Updated CUPS packages that fixes a security issue are now available. The Common UNIX Printing System provides a portable printing layer for UNIXR operating systems. A buffer overflow flaw was found in the Decrypt::makeFileKey2 function of Xpdf which also affects the CUPS pdftops filter due to a...
Xpdf, GPdf: Stack overflow in Decrypt::makeFileKey2
Background Xpdf is an open source viewer for Portable Document Format PDF files. GPdf is a Gnome-based PDF viewer that includes some Xpdf code. Description iDEFENSE reports that the Decrypt::makeFileKey2 function in Xpdf's Decrypt.cc insufficiently checks boundaries when processing /Encrypt /Leng...
USN-64-1: xpdf, CUPS vulnerabilities
A buffer overflow has been found in the xpdf viewer. An insufficient input validation of the encryption key length could be exploited by an attacker providing a specially crafted PDF file which, when processed by xpdf, could result in abnormal program termination or the execution of attacker...
[SECURITY] [DSA 648-1] New xpdf packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 648-1 [email protected] http://www.debian.org/security/ Martin Schulze January 19th, 2005 http://www.debian.org/security/faq -...
USN-48-1: xpdf, tetex-bin vulnerabilities
A potential buffer overflow has been found in the xpdf viewer. An insufficient input validation could be exploited by an attacker providing a specially crafted PDF file which, when processed by xpdf, could result in abnormal program termination or the execution of attacker supplied program code...
GLSA-200410-20 : Xpdf, CUPS: Multiple integer overflows
The remote host is affected by the vulnerability described in GLSA-200410-20 Xpdf, CUPS: Multiple integer overflows Chris Evans discovered multiple integer overflow issues in Xpdf. Impact : An attacker could entice an user to open a specially crafted PDF file, potentially resulting in execution o...
Debian DSA-226-1 : xpdf-i - integer overflow
iDEFENSE discovered an integer overflow in the pdftops filter from the xpdf and xpdf-i packages that can be exploited to gain the privileges of the target user. This can lead to gaining unauthorized access to the 'lp' user if the pdftops program is part of the print filter. %NASLMINLEVEL 70300 C...
