security flaw

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

security flaw

Multiple heap-based buffer overflows in the 1 DCTStream::readProgressiveSOF and 2 DCTStream::readBaselineSOF functions in the DCT stream parsing code Stream.cc in xpdf 3.01 and earlier, as used in products such as a Poppler, b teTeX, c KDE kpdf, d pdftohtml, e KOffice KWord, f CUPS, and g...

security flaw

Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code JPXStream.c for xpdf 3.01 and earlier, as used in products such as 1 Poppler, 2 teTeX, 3 KDE kpdf, 4 CUPS, and 5 libextractor allows user-assisted attackers to cause a denial of service heap...

security flaw

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service infinite loop via streams that end prematurely, as demonstrated using the 1 CCITTFaxDecode and 2 DCTDecode streams, aka "Infinite CPU spins."...

Important: Red Hat Security Advisory: xpdf security update

An updated xpdf package that fixes several security issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 20 Dec 2005 The initial fix for these issues was incomplete. The packages have been updated with a more comple...

iDefense Security Advisory 12.05.05: Multiple Vendor xpdf DCTStream Baseline Heap Overflow Vulnerability

Multiple Vendor xpdf DCTStream Baseline Heap Overflow Vulnerability iDefense Security Advisory 12.05.05 www.idefense.com/application/poi/display?id=342&type=vulnerabilities December 5, 2005 I. BACKGROUND Xpdf is an open-source viewer for Portable Document Format PDF files. II. DESCRIPTION Local...

iDefense Security Advisory 12.05.05: Multiple Vendor xpdf JPX Stream Reader Heap Overflow Vulnerability

Multiple Vendor xpdf JPX Stream Reader Heap Overflow Vulnerability iDefense Security Advisory 12.05.05 www.idefense.com/application/poi/display?id=345&type=vulnerabilities December 5, 2005 I. BACKGROUND Xpdf is an open-source viewer for Portable Document Format PDF files. II. DESCRIPTION Local...

iDefense Security Advisory 12.05.05: Multiple Vendor xpdf DCTStream Progressive Heap Overflow

Multiple Vendor xpdf DCTStream Progressive Heap Overflow iDefense Security Advisory 12.05.05 www.idefense.com/application/poi/display?id=343&type=vulnerabilities December 5, 2005 I. BACKGROUND Xpdf is an open-source viewer for Portable Document Format PDF files. II. DESCRIPTION Local exploitation...

iDefense Security Advisory 12.05.05: Multiple Vendor xpdf StreamPredictor Heap Overflow Vulnerability

Multiple Vendor xpdf StreamPredictor Heap Overflow Vulnerability iDefense Security Advisory 12.05.05 www.idefense.com/application/poi/display?id=344&type=vulnerabilities December 5, 2005 I. BACKGROUND Xpdf is an open-source viewer for Portable Document Format PDF files. II. DESCRIPTION Local...

Mandrake Linux Security Advisory : xpdf (MDKSA-2005:134)

A vulnerability in the xpdf PDF viewer was discovered. An attacker could construct a malicious PDF file that would cause xpdf to consume all available disk space in /tmp when opened. The updated packages have been patched to correct this problem. %NASLMINLEVEL 70300 C Tenable Network Security, In...

Debian DSA-780-1 : kdegraphics - wrong input sanitising

A bug has been discovered in the font handling code in xpdf, which is also present in kpdf, the PDF viewer for KDE. A specially crafted PDF file could cause infinite resource consumption, in terms of both CPU and disk space. The oldstable distribution woody is not affected by this problem...

DSA-780-1 kdegraphics - wrong input sanitising

Bulletin has no description...

Fedora Core 4 : xpdf-3.00-20.FC4.2 (2005-729)

A flaw was discovered in Xpdf in that an attacker could construct a carefully crafted PDF file that would cause Xpdf to consume all available disk space in /tmp when opened. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-2097 to this issue. Users of xpdf should upgrad...

Fedora Core 3 : xpdf-3.00-10.6.FC3 (2005-730)

A flaw was discovered in Xpdf in that an attacker could construct a carefully crafted PDF file that would cause Xpdf to consume all available disk space in /tmp when opened. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-2097 to this issue. Users of xpdf should upgrad...

GLSA-200508-08 : Xpdf, Kpdf, GPdf: Denial of Service vulnerability

The remote host is affected by the vulnerability described in GLSA-200508-08 Xpdf, Kpdf, GPdf: Denial of Service vulnerability Xpdf, Kpdf and GPdf do not handle a broken table of embedded TrueType fonts correctly. After detecting such a table, Xpdf, Kpdf and GPdf attempt to reconstruct the...

CVE-2005-2097

CVE-2005-2097 affects xpdf and variants such as gpdf (and related components like CUPS’ pdftops) where carefully crafted PDFs can cause a denial of service by exhausting disk space (creating a large temporary file). Public sources in the connected documents confirm heap-based overflows and DoS po...

CVE-2005-2097

xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service disk consumption and hang via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information...

CVE-2005-2097

xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service disk consumption and hang via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information...

DEBIAN-CVE-2005-2097

xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service disk consumption and hang via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information...

CVE-2005-2097

xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service disk consumption and hang via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information...