Evince: Stack overflow in included gv code

Background Evince is a document viewer for multiple document formats, including PostScript. Description Evince includes code from GNU gv that does not properly boundary check user-supplied data before copying it into process buffers. Impact An attacker could entice a user to open a specially...

Mandrake Linux Security Advisory : evince (MDKSA-2006:229)

Stack-based buffer overflow in ps.c for evince allows user-assisted attackers to execute arbitrary code via a PostScript PS file with certain headers that contain long comments, as demonstrated using the DocumentMedia header. Packages have been patched to correct this issue. %NASLMINLEVEL 70300 C...

Fedora Core 5 : evince-0.5.1-4 (2006-1437)

The PostScript backend of evince had a buffer overflow CVE-2006-5864. This update fixes the problem. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora Core 6 : evince-0.6.0-5.fc6 (2006-1438)

The PostScript backend of evince had a buffer overflow CVE-2006-5864. This update fixes the problem. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Debian DSA-1243-1 : evince - buffer overflow

Renaud Lifchitz discovered that gv, the PostScript and PDF viewer for X, performs insufficient boundary checks in the Postscript parsing code, which allows the execution of arbitrary code through a buffer overflow. Evince embeds a copy of gv and needs an update as well. %NASLMINLEVEL 70300 C...

[SECURITY] [DSA 1243-1] New evince packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1243-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 28th, 2006 http://www.debian.org/security/faq -...

DSA-1243-1 evince

Bulletin has no description...

FreeBSD : evince -- Buffer Overflow Vulnerability (779a2d55-8ba8-11db-81d5-00123ffe8333)

Secunia reports : A vulnerability has been discovered in Evince, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error within the 'getnexttext' function in ps/ps.c. This can be exploited to cause a buffer overflow by e.g...

USN-390-3: evince-gtk vulnerability

USN-390-2 fixed vulnerabilities in evince. This update provides the corresponding update for evince-gtk. Original advisory details: A buffer overflow was discovered in the PostScript processor included in evince. By tricking a user into opening a specially crafted PS file, an attacker could crash...

USN-390-2: evince vulnerability

USN-390-1 fixed a vulnerability in evince. The original fix did not fully solve the problem, allowing for a denial of service in certain situations. Original advisory details: A buffer overflow was discovered in the PostScript processor included in evince. By tricking a user into opening a...

USN-390-1: evince vulnerability

A buffer overflow was discovered in the PostScript processor included in evince. By tricking a user into opening a specially crafted PS file, an attacker could crash evince or execute arbitrary code with the user's privileges...

Evince Document Viewer (DocumentMedia) Buffer Overflow Exploit

No description provided by source. / Creator: K-sPecial xzziroz.net of .aware awarenetwork.org Name: evince-ps-field-bof.c Date: 11/27/2006 Version: 1.00 - creation Other: this idea originaly came from the bid for the 'gv' buffer overflow 20978, i don't believe it's known until now that evince is...

Evince Document Viewer - DocumentMedia Remote Buffer Overflow

Evince Document Viewer - DocumentMedia Remote Buffer Overflow / Creator: K-sPecial xzziroz.net of .aware awarenetwork.org Name: evince-ps-field-bof.c Date: 11/27/2006 Version: 1.00 - creation Other: this idea originaly came from the bid for the 'gv' buffer overflow 20978, i don't believe it's kno...

Evince Document Viewer (DocumentMedia) Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ============================================================== Evince Document Viewer DocumentMedia Buffer Overflow Exploit ============================================================== / Creator: K-sPecial xzziroz.net of .aware...

Evince Document Viewer - 'DocumentMedia' Remote Buffer Overflow

/ Creator: K-sPecial xzziroz.net of .aware awarenetwork.org Name: evince-ps-field-bof.c Date: 11/27/2006 Version: 1.00 - creation Other: this idea originaly came from the bid for the 'gv' buffer overflow 20978, i don't believe it's known until now that evince is also vulnerable. Compile: gcc -o...

evince -- Buffer Overflow Vulnerability

Secunia reports: A vulnerability has been discovered in Evince, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error within the "getnexttext" function in ps/ps.c. This can be exploited to cause a buffer overflow by e.g...

CVE-2006-5864

Stack-based buffer overflow in the psgettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript PS file with certain headers that contain long comments, as demonstrated using the 1 DocumentMedia, 2...

CVE-2006-5864

Stack-based buffer overflow in the psgettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript PS file with certain headers that contain long comments, as demonstrated using the 1 DocumentMedia, 2...

CVE-2006-5864

Technical details (affected product/component/versions/root cause/impact/remediation) are not publicly provided in the supplied documents. Monitor for updates from the connected sources for concrete information.

CVE-2006-5864

Stack-based buffer overflow in the psgettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript PS file with certain headers that contain long comments, as demonstrated using the 1 DocumentMedia, 2...