[SECURITY] Fedora 32 Update: gd-2.3.0-1.fc32

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...

CVE-2019-17135

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2019-13334

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Wacom Tablet Data Exfiltration Raises Security Concerns

The Wacom digital drawing tablet appears to be silently exfiltrating user data, according to an investigation by software engineer Robert Heaton – and the company responded on Friday, downplaying the report. However, security researchers say the tablets still pose a risk and a privacy problem...

CVE-2019-8769

An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history...

DEBIAN-CVE-2019-8769

An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history...

CVE-2019-8769

An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history...

openSUSE Security Update : java-11-openjdk (openSUSE-2019-2565)

This update for java-11-openjdk to version jdk-11.0.5-10 fixes the following issues : Security issues fixed October 2019 CPU bsc1154212: - CVE-2019-2933: Windows file handling redux - CVE-2019-2945: Better socket support - CVE-2019-2949: Better Kerberos ccache handling - CVE-2019-2958: Build Bett...

openSUSE Security Update : java-11-openjdk (openSUSE-2019-2557)

This update for java-11-openjdk to version jdk-11.0.5-10 fixes the following issues : Security issues fixed October 2019 CPU bsc1154212: - CVE-2019-2933: Windows file handling redux - CVE-2019-2945: Better socket support - CVE-2019-2949: Better Kerberos ccache handling - CVE-2019-2958: Build Bett...

[SECURITY] Fedora 29 Update: gd-2.2.5-8.fc29

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...

Memory Corruption Vulnerability in CAD Mini Drawing

CAD Mini Drawing is a cad drawing software. CAD Mini Drawing Tool has a memory corruption vulnerability when handling BMP images. An attacker can cause the program to crash by constructing a malformed BMP image. If successfully exploited, this could lead to a system denial of service...

Foxit PhantomPDF Buffer Overflow Vulnerability (CNVD-2019-38059)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. The process of converting DXF files to PDF in Foxit PhantomPDF suffers from a buffer overflow vulnerability, which arises from the program failing to validate the length of data before copying the user-submitted data to a...

Foxit PhantomPD Out-of-Bounds Write Vulnerability

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. Foxit PhantomPDF in the DWG file to PDF conversion process there is an out-of-bounds write vulnerability, an attacker can use a malicious page or file to exploit the vulnerability in the context of the current process to execu...

Foxit PhantomPDF Information Disclosure Vulnerability (CNVD-2019-36963)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. There is an information disclosure vulnerability in the parsing of DWG files in Foxit PhantomPDF, which arises from the failure of the program to verify the existence of an object before performing an operation on it, which ca...

Foxit PhantomPDF Dwg2Pdf DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A security vulnerability exists in the parsing of Foxit PhantomPDF Dwg2Pdf DXF files. An attacker can exploit this vulnerability to execute code in the context of the current process...

CVE-2009-0260

Multiple cross-site scripting XSS vulnerabilities in action/AttachFile.py in MoinMoin before 1.8.1 allow remote attackers to inject arbitrary web script or HTML via an AttachFile action to the WikiSandBox component with 1 the rename parameter or 2 the drawing parameter aka the basename variable...

cad mini drawing suffers from dll hijacking vulnerability (CNVD-2019-33724)

Shanghai Xiaomai Technology is an Internet software and engineering data service provider for the building decoration and related manufacturing industries in China. A dll hijacking vulnerability exists in cad mini drawing CNVD-C-2019-128647. An attacker can exploit the vulnerability to load a...

[SECURITY] Fedora 29 Update: libreoffice-6.1.6.3-3.fc29

LibreOffice is an Open Source, community-developed, office productivity sui te. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office suites...

CVE-2019-7364

DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D and version 2017 of AutoCAD P&ID. An attacker may trick a user...

[SECURITY] Fedora 30 Update: libreoffice-6.2.6.2-1.fc30

LibreOffice is an Open Source, community-developed, office productivity sui te. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office suites...