3121 matches found
CVE-2007-5392
Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow...
CVE-2007-4352
Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file...
xpdf -- multiple remote Stream.CC vulnerabilities
Secunia Research reports: Secunia Research has discovered some vulnerabilities in Xpdf, which can be exploited by malicious people to compromise a user's system. An array indexing error within the "DCTStream::readProgressiveDataUnit" method in xpdf/Stream.cc can be exploited to corrupt memory via...
Important: tetex security update
1.0.7-67.11 - xpdf buffer overflow in CCITTFaxStream::lookChar CVE-2007-5393 356761 Resolves: 356761 1.0.7-67.10 - backport upstream fix for xpdf integer overflow CVE-2007-3387 248206 Resolves: 248206...
Important: xpdf security update
3.00-14.el4 - Resolves: 356811, CVE-2007-4352 CVE-2007-5392 CVE-2007-5393...
Fedora 7 : tetex-3.0-40.1.fc7 (2007-1547)
Fri Aug 10 2007 Jindrich Novy 3.0-40.1 - backport upstream fix for xpdf integer overflow CVE-2007-3387 251514 - don't mess up file contexts while running texhash 235032 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...
GLSA-200710-20 : PDFKit, ImageKits: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200710-20 PDFKit, ImageKits: Buffer overflow Maurycy Prodeus discovered an integer overflow vulnerability possibly leading to a stack-based buffer overflow in the XPDF code which PDFKit is based on. ImageKits also contains a copy ...
openSUSE 10 Security Update : poppler (poppler-3991)
A buffer overflow in the xpdf code contained in poppler could be exploited by attackers to potentially execute arbitrary code CVE-2007-3387. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
openSUSE 10 Security Update : xpdf-tools (xpdf-tools-2472)
This update fixes a vulnerability which occurs while processing a special PDF file. This bug can lead to a denial-of-service condition, or a memory corruption, or to arbitrary code execution. CVE-2007-0104 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...
openSUSE 10 Security Update : xpdf (xpdf-2473)
This update fixes a vulnerability which occurs while processing a special PDF file. This bug can lead to a denial-of-service condition, or a memory corruption, or to arbitrary code execution. CVE-2007-0104 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...
openSUSE 10 Security Update : cups (cups-4044)
A buffer overflow in the xpdf code contained in cups could be exploited by attackers to potentially execute arbitrary code CVE-2007-3387. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
openSUSE 10 Security Update : xpdf (xpdf-3974)
A buffer overflow in xpdf could be exploited by attackers to potentially execute arbitrary code CVE-2007-3387. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update xpdf-3974. The text description o...
openSUSE 10 Security Update : kdegraphics3-pdf (kdegraphics3-pdf-3972)
A buffer overflow in the xpdf code contained in kpdf could be exploited by attackers to potentially execute arbitrary code CVE-2007-3387. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
KOffice, KWord, KPDF, KDE Graphics Libraries: Stack-based buffer overflow
Background KOffice is an integrated office suite for KDE. KWord is the KOffice word processor. KPDF is a KDE-based PDF viewer included in the kdegraphics package. Description KPDF includes code from xpdf that is vulnerable to an integer overflow in the StreamPredictor::StreamPredictor function...
teTeX: Multiple buffer overflows
Background teTeX is a complete TeX distribution for editing documents. Description Mark Richters discovered a buffer overflow in the opensty function in file mkind.c. Other vulnerabilities have also been discovered in the same file but might not be exploitable CVE-2007-0650. Tetex also includes...
GLSA-200709-12 : Poppler: Two buffer overflow vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200709-12 Poppler: Two buffer overflow vulnerabilities Poppler and Xpdf are vulnerable to an integer overflow in the StreamPredictor::StreamPredictor function, and a stack overflow in the StreamPredictor::getNextLine function. The...
Poppler: Two buffer overflow vulnerabilities
Background Poppler is a cross-platform PDF rendering library originally based on Xpdf. Description Poppler and Xpdf are vulnerable to an integer overflow in the StreamPredictor::StreamPredictor function, and a stack overflow in the StreamPredictor::getNextLine function. The original vulnerability...
Debian DSA-1357-1 : koffice - integer overflow
It was discovered that an integer overflow in the xpdf PDF viewer may lead to the execution of arbitrary code if a malformed PDF file is opened. koffice includes a copy of the xpdf code and required an update as well. The oldstable distribution sarge will be fixed later. %NASLMINLEVEL 70300 C...
[SECURITY] [DSA 1357-1] New koffice packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1357-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 19th, 2007 http://www.debian.org/security/faq -...
