CVE-2009-4035

Summary (CVE-2009-4035): The flaw exists in FoFiType1::parse in FoFiType1.cc used by Xpdf 3.0.0, gpdf 2.8.2, and kdegraphics 3.3.1 (and possibly other libraries). The code fails to validate the return value of getNextLine, enabling a signed-to-unsigned conversion error when processing a crafted T...

CVE-2009-4035

The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a...

CVE-2009-4035

The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a...

CentOS 4 : xpdf (CESA-2009:1680)

An updated xpdf package that fixes a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System based viewer for Portable Document Format PDF files. Petr Gajdos an...

CVE-2009-4035: Improper Control of Generation of Code

The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a...

xpdf security update

CentOS Errata and Security Advisory CESA-2009:1680 An updated xpdf package that fixes a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System based viewer for...

RHEL 4 : xpdf (RHSA-2009:1680)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:1680 advisory. Xpdf is an X Window System based viewer for Portable Document Format PDF files. Petr Gajdos and Christian Kornacker of SUSE reported a buffer overflo...

xpdf: buffer overflow in FoFiType1::parse

The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a...

Important: Red Hat Security Advisory: xpdf security update

An updated xpdf package that fixes a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System based viewer for Portable Document Format PDF files. Petr Gajdos an...

xpdf security update

3.00-23.1 - Resolves: 543489, CVE-2009-4035, buffer overflow in FoFiType1::parse...

Xpdf Splash DrawImage Integer Overflow (CVE-2009-3604)

Xpdf is an open source PDF viewer for the Unix-like operating systems and works under the X Window graphical user interface system. An integer overflow vulnerability has been reported in Xpdf. The vulnerability is caused by an error in the Xpdf due to lack of input validation when handling images...

Mandriva Security Advisory MDVSA-2009:331 (kdegraphics)

The remote host is missing an update to kdegraphics announced via advisory MDVSA-2009:331. OpenVAS Vulnerability Test $Id: mdksa2009331.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:331 kdegraphics Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandriva Security Advisory MDVSA-2009:331 (kdegraphics)

The remote host is missing an update to kdegraphics announced via advisory MDVSA-2009:331. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Security Advisory MDVSA-2009:287-1 (xpdf)

The remote host is missing an update to xpdf announced via advisory MDVSA-2009:287-1. OpenVAS Vulnerability Test $Id: mdksa20092871.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:287-1 xpdf Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandriva Security Advisory MDVSA-2009:287-1 (xpdf)

The remote host is missing an update to xpdf announced via advisory MDVSA-2009:287-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Security fix for the ALT Linux 5 package xpdf version 3.02-alt7

Nov. 15, 2009 Victor Forsyuk 3.02-alt7 - Apply xpdf-3.02pl4 security patch to fix: CVE-2009-3603, CVE-2009-3604, CVE-2009-3605, CVE-2009-3606, CVE-2009-3608, CVE-2009-3609...

SLES10: Security update for xpdf

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: xpdf-tools More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ V...

SLES10: Security update for xpdf

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: xpdf-tools More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 200...

openSUSE Security Update : xpdf (xpdf-1397)

Specially crafted PDF files could cause buffer overflows in xpdf when viewing such a document CVE-2009-3603, CVE-2009-3604, CVE-2009-3605, CVE-2009-3606, CVE-2009-3608, CVE-2009-3609. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : xpdf (xpdf-1397)

Specially crafted PDF files could cause buffer overflows in xpdf when viewing such a document CVE-2009-3603, CVE-2009-3604, CVE-2009-3605, CVE-2009-3606, CVE-2009-3608, CVE-2009-3609. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...