Fedora 7 : xpdf-3.02-4.fc7 (2007-3031)

Resolves: xpdf memory corruption in DCTStream::readProgressiveDataUnit xpdf buffer overflow in DCTStream::reset xpdf buffer overflow in CCITTFaxStream::lookChar Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Xpdf多个远程Stream.CC漏洞

Xpdf是一款处理PDF的应用程序 Xpdf存在多个缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 1）xpdf/Stream.cc文件中的"DCTStream::readProgressiveDataUnit"方法存在数组索引错误，通过特殊构建的PDF文件可造成内存破坏。 2）xpdf/Stream.cc文件中的"DCTStream::reset"方法存在整数溢出错误，可导致基于堆的缓冲区溢出。...

Ubuntu 6.06 LTS / 6.10 / 7.04 : koffice vulnerability (USN-496-1)

Derek Noonburg discovered an integer overflow in the Xpdf function StreamPredictor::StreamPredictor. By importing a specially crafted PDF file into KWord, this could be exploited to run arbitrary code with the user's privileges. Note that Tenable Network Security has extracted the preceding...

[SECURITY] Fedora 7 Update: xpdf-3.02-4.fc7

Xpdf is an X Window System based viewer for Portable Document Format PDF files. Xpdf is a small and efficient program which uses standard X fonts...

[SECURITY] Fedora 8 Update: xpdf-3.02-4.fc8

Xpdf is an X Window System based viewer for Portable Document Format PDF files. Xpdf is a small and efficient program which uses standard X fonts...

xpdf security update

CentOS Errata and Security Advisory CESA-2007:1031-01 Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based...

CCITTFaxStream:: lookChar()

Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter...

DCTStream:: readProgressiveDataUnit()

Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file...

CVE-2007-5393

Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter...

CVE-2007-4352

Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file...

CVE-2007-5393

Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter...

CVE-2007-5392

Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow...

Heap overflow

Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter...

Memory corruption

Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file...

CVE-2007-4352

Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file...

DEBIAN-CVE-2007-5393

Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter...

Integer overflow

Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow...

DEBIAN-CVE-2007-4352

Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file...

DEBIAN-CVE-2007-5392

Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow...

CVE-2007-4352

The CVE-2007-4352 issue affects Xpdf (Xpdf 3.02pl1 and related components) where an array index error in DCTStream::readProgressiveDataUnit in xpdf/Stream.cc can lead to memory corruption and remote code execution via a crafted PDF. MiracleLinux AXSA:2007-64:02 lists this CVE alongside other Xpdf...