1733 matches found
security flaw
The DefineConstantPool action in the ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, accepts an untrusted input value for a "constant count," which allows remote attackers to read sensitive data from process memory vi...
Debian DSA-1548-1 : xpdf - several vulnerabilities
Kees Cook discovered a vulnerability in xpdf, a set of tools for display and conversion of Portable Document Format PDF files. The Common Vulnerabilities and Exposures project identifies the following problem : - CVE-2008-1693 Xpdf's handling of embedded fonts lacks sufficient validation and type...
DEBIAN-CVE-2008-1693
The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, relate...
DSA-1548-1 xpdf
Bulletin has no description...
[SECURITY] [DSA 1537-1] New xpdf packages fix multiple vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1537-1 [email protected] http://www.debian.org/security/ Devin Carraway April 02, 2008 http://www.debian.org/security/faq -...
PT-2008-2963 · Red Hat · Cups +1
Name of the Vulnerable Software and Affected Versions: CUPS versions in Red Hat Enterprise Linux 3 and 4 Description: The issue is caused by an integer overflow in the pdftops filter in CUPS, which can be exploited by remote attackers to execute arbitrary code via a crafted PDF file. This issue i...
[SECURITY] Fedora 8 Update: ghostscript-8.61-8.fc8
Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into ma...
Debian: Security Advisory (DSA-982-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 936-1 (libextractor)
The remote host is missing an update to libextractor announced via advisory DSA 936-1. infamous41md and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, which is also present in libextractor, a library to extract arbitrary meta-data from...
Debian: Security Advisory (DSA-1019-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-979-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 984-1 (xpdf)
The remote host is missing an update to xpdf announced via advisory DSA 984-1. Derek Noonburg has fixed several potential vulnerabilities in xpdf, the Portable Document Format PDF suite. The old stable distribution woody does not seem to be affected. OpenVAS Vulnerability Test $Id: deb9841.nasl...
Debian: Security Advisory (DSA-984-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 932-1 (xpdf)
The remote host is missing an update to xpdf announced via advisory DSA 932-1. infamous41md and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, that can lead to a denial of service by crashing the application or possibly to the execution...
MS Office 2007: Digital Signature does not protect Meta-Data
Affects: Microsoft Office 2007 12.0.6015.5000 MSO 12.0.6017.5000 possibly older versions I. Background Microsoft Office is a suite containing several programs to handle Office documents like text documents or spreadsheets. The latest version uses an XML based document format. Microsoft Office...
CCITTFaxStream:: lookChar()
Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter...
DCTStream:: reset()
Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow...
xpdf integer overflow
Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in 1 poppler before 0.5.91, 2 gpdf before 2.8.2, 3 kpdf, 4 kdegraphics, 5 CUPS, 6 PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a...
