openSUSE 10 Security Update : cups (cups-4668)

A buffer overflow in the xpdf code contained in cups could be exploited by attackers to potentially execute arbitrary code CVE-2007-4352, CVE-2007-5392, CVE-2007-5393. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

openSUSE 10 Security Update : kdegraphics3-pdf (kdegraphics3-pdf-4681)

A buffer overflow in the xpdf code contained in kpdf could be exploited by attackers to potentially execute arbitrary code CVE-2007-5393. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CCITTFaxStream:: lookChar()

Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter...

DCTStream:: reset()

Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow...

[slackware-security] xpdf/poppler/koffice/kdegraphics

New xpdf packages are available for Slackware 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, and -current. New poppler packages are available for Slackware 12.0 and -current. New koffice packages are available for Slackware 11.0, 12.0, and -current. New kdegraphics packages are available for Slackware 10.2,...

openSUSE 10 Security Update : pdftohtml (pdftohtml-4642)

A buffer overflow in the xpdf code contained in pdftohtml could be exploited by attackers to potentially execute arbitrary code CVE-2007-4352, CVE-2007-5392, CVE-2007-5393. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 9.1 / current : xpdf/poppler/koffice/kdegraphics (SSA:2007-316-01)

New xpdf packages are available for Slackware 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, and -current. New poppler packages are available for Slackware 12.0 and -current. New koffice packages are available for Slackware 11.0, 12.0, and -current. New kdegraphics packages are available for Slackware 10.2,...

Fedora 7 : xpdf-3.02-4.fc7 (2007-3031)

Resolves: xpdf memory corruption in DCTStream::readProgressiveDataUnit xpdf buffer overflow in DCTStream::reset xpdf buffer overflow in CCITTFaxStream::lookChar Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

openSUSE 10 Security Update : libextractor (libextractor-4646)

A buffer overflow in the xpdf code contained in libextractor could be exploited by attackers to potentially execute arbitrary code CVE-2007-4352, CVE-2007-5392, CVE-2007-5393. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

RHEL 4 : kdegraphics (RHSA-2007:1024)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2007:1024 advisory. - xpdf memory corruption in DCTStream::readProgressiveDataUnit CVE-2007-4352 - xpdf buffer overflow in DCTStream::reset CVE-2007-5392 - xpdf...

openSUSE 10 Security Update : xpdf (xpdf-4643)

A buffer overflow in xpdf could be exploited by attackers to potentially execute arbitrary code CVE-2007-4352, CVE-2007-5392, CVE-2007-5393. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Security fix for the ALT Linux 5 package xpdf version 3.02-alt3

Nov. 12, 2007 Victor Forsyuk 3.02-alt3 - Security fixes: - CVE-2007-4352 - CVE-2007-5392 - CVE-2007-5393...

Fedora 8 : xpdf-3.02-4.fc8 (2007-3014)

Resolves: xpdf memory corruption in DCTStream::readProgressiveDataUnit xpdf buffer overflow in DCTStream::reset xpdf buffer overflow in CCITTFaxStream::lookChar Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

openSUSE 10 Security Update : koffice (koffice-4649)

A buffer overflow in the xpdf code contained in koffice could be exploited by attackers to potentially execute arbitrary code CVE-2007-4352, CVE-2007-5392, CVE-2007-5393. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

Xpdf多个远程Stream.CC漏洞

Xpdf是一款处理PDF的应用程序 Xpdf存在多个缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 1）xpdf/Stream.cc文件中的"DCTStream::readProgressiveDataUnit"方法存在数组索引错误，通过特殊构建的PDF文件可造成内存破坏。 2）xpdf/Stream.cc文件中的"DCTStream::reset"方法存在整数溢出错误，可导致基于堆的缓冲区溢出。...

Ubuntu 6.06 LTS / 6.10 / 7.04 : koffice vulnerability (USN-496-1)

Derek Noonburg discovered an integer overflow in the Xpdf function StreamPredictor::StreamPredictor. By importing a specially crafted PDF file into KWord, this could be exploited to run arbitrary code with the user's privileges. Note that Tenable Network Security has extracted the preceding...

[SECURITY] Fedora 7 Update: xpdf-3.02-4.fc7

Xpdf is an X Window System based viewer for Portable Document Format PDF files. Xpdf is a small and efficient program which uses standard X fonts...

[SECURITY] Fedora 8 Update: xpdf-3.02-4.fc8

Xpdf is an X Window System based viewer for Portable Document Format PDF files. Xpdf is a small and efficient program which uses standard X fonts...

xpdf security update

CentOS Errata and Security Advisory CESA-2007:1031-01 Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based...

CCITTFaxStream:: lookChar()

Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter...