CVE-2019-20829

Foxit Reader and PhantomPDF are affected by CVE-2019-20829 due to a NULL pointer dereference in FXSYS_wcslen while processing EPUB files, impacting versions before 9.6. This can cause the application to crash. Remediation: upgrade to Foxit 9.6 or later (as indicated by multiple connected sources).

CVE-2019-20829

An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYSwcslen in an Epub file...

The vulnerability of the EPUB validator FlightCrew, related to insufficient validation of input data, allows a perpetrator to write arbitrary files.

The vulnerability of the EPUB validator FlightCrew is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to write arbitrary files into any directory within a Zip archive...

April 14, 2020—KB4550927 (OS Build 16299.1806)

None None...

Moderate: Red Hat Security Advisory: okular security update

An update for okular is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

March 30, 2020—KB4554342 (OS Build 16299.1776)

None None...

February 11, 2020—KB4537789 (OS Build 16299.1686)

None None...

January 23, 2020—KB4534318 (OS Build 16299.1654)

None None...

January 14, 2020—KB4534276 (OS Build 16299.1625)

None None...

October 8, 2019—KB4520008 (OS Build 17134.1069)

None None...

October 8, 2019—KB4520010 (OS Build 15063.2108)

None None...

October 24, 2019—KB4522355 (OS Build 18362.449)

None None...

October 15, 2019—KB4519978 (OS Build 17134.1099)

None None...

October 15, 2019—KB4520006 (OS Build 16299.1481)

None None...

October 15, 2019—KB4520062 (OS Build 17763.832)

None None...

October 3, 2019—KB4524150 (OS Build 16299.1421)

None None...

October 3, 2019—KB4524149 (OS Build 17134.1040)

None None...

September 24, 2019—KB4516059 (OS Build 15063.2078)

None None...

September 10, 2019—KB4515384 (OS Build 18362.356)

None None...

Updated sigil packages fix security vulnerability

Updated sigil package fixes security vulnerability: Mike Salvatore discovered that Sigil mishandled certain malformed EPUB files. An attacker could use this vulnerability to write arbitrary files to the filesystem CVE-2019-14452...