xpdf/poppler: Splash:: drawImage integer overflow and missing allocation return value check

The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted P...

xpdf/poppler: integer overflow in ObjectStream::ObjectStream (oCERT-2009-016)

Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based...

xpdf security update

3.00-22.1 - Resolves: 527468, CVE-2009-0791 3.00-22.el4 - CVE-2009-0791 3.00-21.el4 - CVE-2009-0791...

xpdf security update

2.02-17.el3 - Resolves: 527470, CVE-2009-0791 2.02-16.el3 - Resolves: 527470, CVE-2009-0791 2.02-15.el3 - Resolves: 527470, CVE-2009-0791...

Xpdf -- Multiple Vulnerabilities

SecurityFocus reports: Some vulnerabilities have been reported in Xpdf, which can be exploited by malicious people to potentially compromise a user's system. 1 Multiple integer overflows in "SplashBitmap::SplashBitmap" can be exploited to cause heap-based buffer overflows. 2 An integer overflow...

SLES10: Security update for xpdf

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: xpdf-tools More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 200...

SLES10: Security update for xpdf

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: xpdf-tools More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ V...

SLES10: Security update for xpdf

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: xpdf-tools More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ V...

SLES10: Security update for xpdf

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: xpdf-tools More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 200...

SLES10: Security update for xpdf

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: xpdf-tools More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 200...

SLES10: Security update for xpdf

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: xpdf-tools More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ V...

SLES11: Security update for xpdf

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: xpdf-tools More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at http://download.novell.com/patch/finder/ V...

SLES11: Security update for xpdf

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: xpdf-tools More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references. SPDX-FileCopyrightText: 200...

openSUSE 10 Security Update : xpdf (xpdf-6376)

Specially crafted PDF documents could crash xpdf or potentially even allow execution of arbitrary code CVE-2009-0791. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update xpdf-6376. The text...

SuSE 10 Security Update : xpdf (ZYPP Patch Number 6378)

Specially crafted PDF documents could crash xpdf or potentially even allow execution of arbitrary code. CVE-2009-0791 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE 11 Security Update : xpdf (SAT Patch Number 1140)

Specially crafted PDF documents could crash xpdf or potentially even allow execution of arbitrary code. CVE-2009-0791 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 10 Security Update : xpdf (ZYPP Patch Number 6177)

Specially crafted PDF files could lead to crashes, make the viewer run into an infinite loop or potentially even allow execution of arbitrary code. CVE-2009-0165 / CVE-2009-0146 / CVE-2009-0147 / CVE-2009-0166 / CVE-2009-0799 / CVE-2009-0800 / CVE-2009-1179 / CVE-2009-1180 / CVE-2009-1181 /...

SuSE9 Security Update : Cups (YOU Patch Number 11965)

A number of vulnerabilities have been found in the xpdf code used by cups which could be exploited, potentially remotely, by tricking the user to print a specially crafted PDF file. The vulnerabilities are in the source code file Stream.cc and may allow execution of arbitrary code with the...

openSUSE Security Update : xpdf (xpdf-1138)

Specially crafted PDF documents could crash xpdf or potentially even allow execution of arbitrary code CVE-2009-0791. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update xpdf-1138. The text...

Fedora 11 : pdfedit-0.4.3-1.fc11 (2009-7924)

Update to new upstream version 0.4.3 fixing multiple issues: xpdf code base updated to 3.02pl3 patch which fixes several serious remote vulnerabilities - French translation update bug 275 Fix for 33853 Secunia advisory backported from poppler Flattener class implemented bt289 Bugs 248, 256, 285,...