Lucene search
+L

691 matches found

Veracode
Veracode
added 2020/04/10 12:39 a.m.31 views

Buffer Overflow

Poppler is vulnerable buffer overflows. Due to the flaw found in poppler, an attacker could create a malicious PDF file that would cause applications that use poppler such as Evince to crash or, potentially, execute arbitrary code when opened...

9.3CVSS5.2AI score0.08582EPSS
SaveExploits1References180Affected Software1
Veracode
Veracode
added 2020/04/10 12:32 a.m.22 views

Arbitrary Code Execution

poppler is vulnerable to arbitrary code execution. The vulnerability exists as an attacker could create a malicious PDF file that would cause applications that use poppler such as Evince to crash or, potentially, execute arbitrary code when opened...

5CVSS5AI score0.07233EPSS
SaveExploits1References49Affected Software3
Veracode
Veracode
added 2020/04/10 12:32 a.m.24 views

Arbitrary Code Execution

poppler is vulnerable to arbitrary code execution. Multiple integer overflow flaws were found in poppler. An attacker could create a malicious PDF file that would cause applications that use poppler such as Evince to crash or, potentially, execute arbitrary code when opened...

5CVSS5.1AI score0.07172EPSS
SaveExploits1References24Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/04/10 12:00 a.m.47 views

CentOS 7 : poppler and evince (RHSA-2020:1074)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1074 advisory. - Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc. CVE-2018-21009 - An issue was discovered in Poppler 0.74.0. There i...

8.8CVSS7AI score0.02486EPSS
SaveExploits2References6
Cent OS
Cent OS
added 2020/04/08 5:56 p.m.136 views

evince, poppler security update

CentOS Errata and Security Advisory CESA-2020:1074 An update for poppler and evince is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detaile...

8.8CVSS6.9AI score0.02486EPSS
SaveExploits2References7
Oracle linux
Oracle linux
added 2020/04/06 12:00 a.m.63 views

poppler and evince security update

evince 3.28.2-9 - Handle failure from TIFFReadRGBAImageOriented - Resolves: 1717352 poppler 0.26.5-42 - Fix potential integer overflow and check length for negative values - Resolves: 1757283 0.26.5-41 - Ignore dict Length if it is broken - Resolves: 1733026 0.26.5-40 - Fail gracefully if not all...

8.8CVSS2.5AI score0.02486EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2020/04/01 2:29 a.m.31 views

CVE-2019-11459

The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...

5.5CVSS4.4AI score0.01443EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2020/03/31 9:13 p.m.12 views

evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail()

The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...

5.5CVSS7.3AI score0.01443EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/03/31 9:13 p.m.65 views

Moderate: Red Hat Security Advisory: poppler and evince security update

An update for poppler and evince is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

8.8CVSS6.9AI score0.02486EPSS
SaveExploits2References7
Tenable Nessus
Tenable Nessus
added 2020/02/18 12:00 a.m.39 views

Debian DSA-4624-1 : evince - security update

Several vulnerabilities were discovered in evince, a simple multi-page document viewer. - CVE-2017-1000159 Tobias Mueller reported that the DVI exporter in evince is susceptible to a command injection vulnerability via specially crafted filenames. - CVE-2019-11459 Andy Nguyen reported that the...

7.8CVSS7.2AI score0.02092EPSS
SaveExploits1References12
OpenVAS
OpenVAS
added 2020/02/15 12:00 a.m.27 views

Debian: Security Advisory (DSA-4624-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.02092EPSS
SaveExploits1References4
Debian
Debian
added 2020/02/14 11:00 p.m.90 views

[SECURITY] [DSA 4624-1] evince security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4624-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 14, 2020 https://www.debian.org/security/faq -...

6.8CVSS2.8AI score0.02092EPSS
SaveExploits1
Debian
Debian
added 2020/02/14 11:00 p.m.182 views

[SECURITY] [DSA 4624-1] evince security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4624-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 14, 2020 https://www.debian.org/security/faq -...

7.8CVSS8.9AI score0.02092EPSS
SaveExploits1
OSV
OSV
added 2020/02/14 12:00 a.m.28 views

DSA-4624-1 evince - security update

Bulletin has no description...

7.8CVSS6.8AI score0.02092EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.14 views

Huawei EulerOS: Security Advisory for evince (EulerOS-SA-2017-1221)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.51076EPSS
SaveExploits9References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.19 views

Huawei EulerOS: Security Advisory for evince (EulerOS-SA-2017-1222)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.51076EPSS
SaveExploits9References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.27 views

Huawei EulerOS: Security Advisory for evince (EulerOS-SA-2019-1906)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.5AI score0.02092EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.19 views

Huawei EulerOS: Security Advisory for evince (EulerOS-SA-2018-1009)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.01406EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.20 views

Huawei EulerOS: Security Advisory for evince (EulerOS-SA-2018-1010)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.01406EPSS
SaveExploits0References2
Mageia
Mageia
added 2019/12/06 2:15 p.m.57 views

Updated evince packages fix security vulnerability

The updated packages fix a security vulnerability: The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image...

5.5CVSS4.3AI score0.01443EPSS
SaveExploits0References3
Rows per page
Query Builder