Command injection

Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka "command injection vulnerability."...

CVE-2009-1656

Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka "command injection vulnerability."...

CVE-2009-1605

Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdffunction.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: some of these details are obtained from thir...

Debian: Security Advisory (DSA-1796-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : python-crypto (python-crypto-6063)

Missing checks for the key length in the ARC2 module potentially allowed attackers to crash applications using python-crypto or potentially even cause execute arbitrary code CVE-2009-0544. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Debian DSA-1793-1 : kdegraphics - multiple vulnerabilities

kpdf, a Portable Document Format PDF viewer for KDE, is based on the xpdf program and thus suffers from similar flaws to those described in DSA-1790. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0146 Multiple buffer overflows in the JBIG2 decoder...

[SECURITY] [DSA 1796-1] New libwmf packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA-1796-1 [email protected] http://www.debian.org/security/ Nico Golde April 7th, 2009 http://www.debian.org/security/faq -...

Debian DSA-1790-1 : xpdf - multiple vulnerabilities

Several vulnerabilities have been identified in xpdf, a suite of tools for viewing and converting Portable Document Format PDF files. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0146 Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2...

HP-UX Update for X Font Server (xfs) Software HPSBUX02303

Check for the Version of X Font Server xfs Software OpenVAS Vulnerability Test HP-UX Update for X Font Server xfs Software HPSBUX02303 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

HP-UX Update for HP CIFS Server (Samba) HPSBUX02341

Check for the Version of HP CIFS Server Samba OpenVAS Vulnerability Test HP-UX Update for HP CIFS Server Samba HPSBUX02341 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

HP-UX Update for HP-UX Pkg HPSBUX00271

Check for the Version of HP-UX Pkg OpenVAS Vulnerability Test HP-UX Update for HP-UX Pkg HPSBUX00271 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

HP-UX Update for Netscape Directory Server Using LDAP HPSBUX01105

Check for the Version of Netscape Directory Server Using LDAP OpenVAS Vulnerability Test HP-UX Update for Netscape Directory Server Using LDAP HPSBUX01105 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

libwmf -- embedded GD library Use-After-Free vulnerability

Secunia reports: A vulnerability has been reported in libwmf, which can be exploited by malicious people to cause a DoS Denial of Service or compromise an application using the library. The vulnerability is caused due to a use-after-free error within the embedded GD library, which can be exploite...

Buffer overflow

Buffer overflow in the PATinst function in src/loadpat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name...

CVE-2009-1513

Buffer overflow in the PATinst function in src/loadpat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name...

CVE-2009-1497

Stack-based buffer overflow in srt2smi.exe in Gretech Online Movie Player GOM Player 2.1.16.4635 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long string in an SRT file...

CVE-2009-1492

The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a PDF file that contains an annotation, and has an OpenAction entry with JavaScript code...

Mandrake Security Advisory MDVSA-2009:096 (printer-drivers)

The remote host is missing an update to printer-drivers announced via advisory MDVSA-2009:096. OpenVAS Vulnerability Test $Id: mdksa2009096.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:096 printer-drivers Authors: Thomas Reinke Copyright: Copyrigh...

Mandriva Linux Security Advisory : ghostscript (MDVSA-2009:095)

A buffer underflow in Ghostscript's CCITTFax decoding filter allows remote attackers to cause denial of service and possibly to execute arbitrary by using a crafted PDF file CVE-2007-6725. Buffer overflow in Ghostscript's BaseFont writer module allows remote attackers to cause a denial of service...

CVE-2009-1188

Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service application crash...