Fedora Core 3 : gpdf-2.8.2-6.2 (2005-1146)

Several more flaws were discovered in Xpdf, which is used internally by gpdf. An attacker could construct a carefully crafted PDF file that could cause gpdf to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-3193 to...

Fedora Core 3 : gpdf-2.8.2-5.2 (2005-1125)

Several flaws were discovered in Xpdf, which is used internally by gpdf. An attacker could construct a carefully crafted PDF file that could cause gpdf to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-3193 to thes...

GLSA-200508-08 : Xpdf, Kpdf, GPdf: Denial of Service vulnerability

The remote host is affected by the vulnerability described in GLSA-200508-08 Xpdf, Kpdf, GPdf: Denial of Service vulnerability Xpdf, Kpdf and GPdf do not handle a broken table of embedded TrueType fonts correctly. After detecting such a table, Xpdf, Kpdf and GPdf attempt to reconstruct the...

Xpdf, Kpdf, GPdf: Denial of Service vulnerability

Background Xpdf, Kpdf and GPdf are PDF file viewers that run under the X Window System. Kpdf and GPdf both contain Xpdf code. Kpdf is also part of kdegraphics. Description Xpdf, Kpdf and GPdf do not handle a broken table of embedded TrueType fonts correctly. After detecting such a table, Xpdf, Kp...

RHEL 4 : gpdf (RHSA-2005:708)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:708 advisory. The gpdf package is an GNOME based viewer for Portable Document Format PDF files. Marcus Meissner reported a flaw in gpdf. An attacker could construct...

gpdf security update

CentOS Errata and Security Advisory CESA-2005:708 An updated gpdf package that fixes a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gpdf package is an GNOME based viewer for...

Moderate: Red Hat Security Advisory: gpdf security update

An updated gpdf package that fixes a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gpdf package is an GNOME based viewer for Portable Document Format PDF files. Marcus Meissn...

RHEL 4 : gpdf (RHSA-2005:057)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:057 advisory. GPdf is a viewer for Portable Document Format PDF files for GNOME. A buffer overflow flaw was found in the Gfx::doImage function of Xpdf whic...

Important: Red Hat Security Advisory: gpdf security update

An updated gpdf package that fixes two security issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GPdf is a viewer for Portable Document Format PDF files for GNOME. A buffer overflow flaw was found in the Gfx::doImage...

GLSA-200501-28 : Xpdf, GPdf: Stack overflow in Decrypt::makeFileKey2

The remote host is affected by the vulnerability described in GLSA-200501-28 Xpdf, GPdf: Stack overflow in Decrypt::makeFileKey2 iDEFENSE reports that the Decrypt::makeFileKey2 function in Xpdf's Decrypt.cc insufficiently checks boundaries when processing /Encrypt /Length tags in PDF files. Impac...

Mandrake Linux Security Advisory : gpdf (MDKSA-2005:016)

A buffer overflow vulnerability was discovered in the xpdf PDF code, which could allow for arbitrary code execution as the user viewing a PDF file. The vulnerability exists due to insufficient bounds checking while processing a PDF file that provides malicious values in the /Encrypt /Length tag...

DTSA-28-1 gpdf - multiple vulnerabilities

Bulletin has no description...

Xpdf, GPdf: Stack overflow in Decrypt::makeFileKey2

Background Xpdf is an open source viewer for Portable Document Format PDF files. GPdf is a Gnome-based PDF viewer that includes some Xpdf code. Description iDEFENSE reports that the Decrypt::makeFileKey2 function in Xpdf's Decrypt.cc insufficiently checks boundaries when processing /Encrypt /Leng...

Mandrake Linux Security Advisory : gpdf (MDKSA-2004:162)

iDefense reported a buffer overflow vulnerability, which affects versions of xpdf = xpdf-3.0 and several programs, like gpdf, which use embedded xpdf code. An attacker could construct a malicious payload file which could enable arbitrary code execution on the target system. The updated packages a...

GLSA-200412-24 : Xpdf, GPdf: New integer overflows

The remote host is affected by the vulnerability described in GLSA-200412-24 Xpdf, GPdf: New integer overflows A new integer overflow issue was discovered in Xpdf's Gfx::doImage function. Impact : An attacker could entice an user to open a specially crafted PDF file, potentially resulting in...

Xpdf, GPdf: New integer overflows

Background Xpdf is an open source viewer for Portable Document Format PDF files. GPdf is a Gnome-based PDF viewer that includes some Xpdf code. Description A new integer overflow issue was discovered in Xpdf's Gfx::doImage function. Impact An attacker could entice an user to open a...

Fedora Core 2 : gpdf-2.8.0-4.1.fc2 (2004-358)

Update to gpdf 2.8.0, which fixes the CVE-2004-0888 security issue. Also fixes: rh127803 crash with mailto: links rh132469 crash with remote documents using gnome-vfs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenab...

GPdf, KPDF, KOffice: Vulnerabilities in included xpdf

Background GPdf is a Gnome-based PDF viewer. KPDF, part of the kdegraphics package, is a KDE-based PDF viewer. KOffice is an integrated office suite for KDE. Description GPdf, KPDF and KOffice all include xpdf code to handle PDF files. xpdf is vulnerable to multiple integer overflows, as describe...

GLSA-200410-30 : GPdf, KPDF, KOffice: Vulnerabilities in included xpdf

The remote host is affected by the vulnerability described in GLSA-200410-30 GPdf, KPDF, KOffice: Vulnerabilities in included xpdf GPdf, KPDF and KOffice all include xpdf code to handle PDF files. xpdf is vulnerable to multiple integer overflows, as described in GLSA 200410-20. Impact : An attack...

CVE-2004-0888

CVE-2004-0888 : Multiple integer overflows in xpdf (v2.0/v3.0) and in code that uses xpdf (e.g., CUPS, gpdf, kdegraphics) allow remote attackers to crash services and possibly execute arbitrary code. Some reports note 64-bit builds can exacerbate the overflow (pdftops/filter path). Remediation is...