RedHat Security Advisory RHSA-2009:1500

The remote host is missing updates announced in advisory RHSA-2009:1500. Xpdf is an X Window System based viewer for Portable Document Format PDF files. Multiple integer overflow flaws were found in Xpdf. An attacker could create a malicious PDF file that would cause Xpdf to crash or, potentially...

CentOS Security Advisory CESA-2009:1500 (xpdf)

The remote host is missing updates to xpdf announced in advisory CESA-2009:1500. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

RedHat Security Advisory RHSA-2009:1501

The remote host is missing updates announced in advisory RHSA-2009:1501. Xpdf is an X Window System based viewer for Portable Document Format PDF files. Multiple integer overflow flaws were found in Xpdf. An attacker could create a malicious PDF file that would cause Xpdf to crash or, potentially...

Xpdf 3.01 - Local Heap Overflow / Null Pointer Dereference

Name: Xpdf - Integer overflow which causes heap overflow and NULL pointer derefernce Author: Adam Zabrocki / HISPASEC or Date: July 06, 2009 Issue: Xpdf allows local and remote attackers to overflow buffer on heap via integer overflow vulnerability. Xpdf is prone to NULL pointer dereference attac...

Xpdf 3.01 heap overflow and null pointer dereference

No description provided by source. Name: Xpdf - Integer overflow which causes heap overflow and NULL pointer derefernce Author: Adam Zabrocki / HISPASEC [email protected] or [email protected] Date: July 06, 2009 Issue: Xpdf allows local and remote attackers to overflow buffer on heap via integer...

Xpdf 3.01 - Local Heap Overflow Null Pointer Dereference

Xpdf 3.01 - Local Heap Overflow Null Pointer Dereference Name: Xpdf - Integer overflow which causes heap overflow and NULL pointer derefernce Author: Adam Zabrocki / HISPASEC or Date: July 06, 2009 Issue: Xpdf allows local and remote attackers to overflow buffer on heap via integer overflow...

Xpdf 3.01 heap overflow and null pointer dereference

Exploit for unknown platform in category local exploits ==================================================== Xpdf 3.01 heap overflow and null pointer dereference ==================================================== Title: Xpdf 3.01 heap overflow and null pointer dereference CVE-ID: OSVDB-ID:...

Xpdf Integer Overflow

Name: Xpdf - Integer overflow which causes heap overflow and NULL pointer derefernce Author: Adam Zabrocki / HISPASEC or Date: July 06, 2009 Issue: Xpdf allows local and remote attackers to overflow buffer on heap via integer overflow vulnerability. Xpdf is prone to NULL pointer dereference attac...

RHEL 4 : kdegraphics (RHSA-2009:1512)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1512 advisory. The kdegraphics packages contain applications for the K Desktop Environment, including KPDF, a viewer for Portable Document Format PDF files...

CentOS 3 : xpdf (CESA-2009:1500)

An updated xpdf package that fixes multiple security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System based viewer for Portable Document Format PDF files. Multip...

RHEL 3 : xpdf (RHSA-2009:1500)

An updated xpdf package that fixes multiple security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System based viewer for Portable Document Format PDF files. Multip...

RHEL 4 : xpdf (RHSA-2009:1501)

An updated xpdf package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System based viewer for Portable Document Format PDF files. Multip...

xpdf security update

CentOS Errata and Security Advisory CESA-2009:1500 An updated xpdf package that fixes multiple security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System based...

xpdf/poppler: integer overflow in ObjectStream::ObjectStream (oCERT-2009-016)

Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based...

xpdf/poppler: Splash:: drawImage integer overflow and missing allocation return value check

The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted P...

xpdf: multiple integer overflows

Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF file that trigger...

xpdf/poppler: ImageStream:: ImageStream integer overflow

Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service application crash via a crafted PDF document that triggers a NULL...

xpdf/poppler: SplashBitmap:: SplashBitmap integer overflow

Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party...

xpdf/poppler: integer overflow in ObjectStream::ObjectStream (oCERT-2009-016)

Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based...

xpdf/poppler: SplashBitmap integer overflow

Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service application crash...