Fedora Core 4 : xpdf-3.01-0.FC4.6 (2006-027)

Several flaws were discovered in Xpdf. An attacker could construct a carefully crafted PDF file that could cause xpdf to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-3193 to these issues. Users of xpdf should...

Ubuntu 4.10 : xpdf, cupsys vulnerabilities (USN-64-1)

A buffer overflow has been found in the xpdf viewer. An insufficient input validation of the encryption key length could be exploited by an attacker providing a specially crafted PDF file which, when processed by xpdf, could result in abnormal program termination or the execution of attacker...

SUSE-SA:2006:001: xpdf,kpdf,gpdf,kword

The remote host is missing the patch for the advisory SUSE-SA:2006:001 xpdf,kpdf,gpdf,kword. 'infamous41md', Chris Evans and Dirk Mueller discovered multiple places in xpdf code where integer variables are insufficiently checked for range or overflow. Specially crafted PDF files could lead to...

Mandrake Linux Security Advisory : koffice (MDKSA-2006:008)

Multiple heap-based buffer overflows in the DCTStream::readProgressiveSOF and DCTStream::readBaselineSOF functions in the DCT stream parsing code Stream.cc in xpdf 3.01 and earlier, allow user-complicit attackers to cause a denial of service heap corruption and possibly execute arbitrary code via...

Ubuntu 4.10 / 5.04 : xpdf vulnerability (USN-163-1)

xpdf and kpdf did not sufficiently verify the validity of the 'loca' table in PDF files, a table that contains glyph description information for embedded TrueType fonts. After detecting the broken table, xpdf attempted to reconstruct the information in it, which caused the generation of a huge...

Ubuntu 4.10 : tetex-bin vulnerabilities (USN-9-1)

Chris Evans and Marcus Meissner recently discovered several integer overflow vulnerabilities in xpdf, a viewer for PDF files. Because tetex-bin contains xpdf code, it is also affected. These vulnerabilities could be exploited by an attacker providing a specially crafted TeX, LaTeX, or PDF file...

Security fix for the ALT Linux 5 package xpdf version 3.01-alt3

Jan. 13, 2006 Victor Forsyuk 3.01-alt3 - Security fix CVE-2005-3191. Apply both recent security patches from Fedora package...

[SECURITY] [DSA 938-1] New koffice packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 938-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 938-1] New koffice packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 938-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 937-1] New tetex-bin packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 937-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2006 http://www.debian.org/security/faq -...

DSA-938-1 koffice - buffer overflows

Bulletin has no description...

DSA-937-1 tetex-bin - buffer overflows

Bulletin has no description...

security flaw

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service infinite loop via streams that end prematurely, as demonstrated using the 1 CCITTFaxDecode and 2 DCTDecode streams, aka "Infinite CPU spins."...

security flaw

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

security flaw

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service crash via a crafted FlateDecode stream that triggers a null dereference...

security flaw

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service crash via a crafted FlateDecode stream that triggers a null dereference...

security flaw

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

[SECURITY] [DSA 936-1] New libextractor packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 936-1 [email protected] http://www.debian.org/security/ Martin Schulze January 11th, 2006 http://www.debian.org/security/faq -...

DSA-936-1 libextractor - buffer overflows

Bulletin has no description...

[SECURITY] [DSA 932-1] New kpdf packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 932-1 [email protected] http://www.debian.org/security/ Martin Schulze January 9th, 2006 http://www.debian.org/security/faq -...