CVE-2015-3258

CVE-2015-3258 affects cups-filters' texttopdf component (filter/texttopdf.c). Root cause: a heap-based buffer overflow in WriteProlog when processing a print job with a small line size, allowing a remote attacker to crash texttopdf or possibly execute arbitrary code. Affected product: cups-filter...

CVE-2015-3279

CVE-2015-3279 (and CVE-2015-3258) affects cups-filters texttopdf in the texttopdf filter of cups-filters. The vulnerability is a heap-based buffer overflow (and associated integer overflow) triggered by processing a print job with a crafted line size, allowing remote attackers to crash texttopdf ...

CVE-2015-3279

Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow...

Google Chrome < 43.0.2357.132 Multiple Vulnerabilities (Mac OS X)

The version of Google Chrome installed on the remote Mac OS X host is prior to 43.0.2357.132. It is, therefore, affected by multiple vulnerabilities in the bundled version of Adobe Flash : - An information disclosure vulnerability exists that allows an attacker to guess the address for the Flash...

Moderate: Red Hat Security Advisory: php54-php security update

Updated php54-php packages that fix multiple security issues are now available for Red Hat Software Collections 2. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Heap overflow

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute...

CVE-2015-5118

CVE-2015-5118 is a heap-based buffer overflow in Adobe Flash Player (Windows/OS X: prior to 13.0.0.302 and 14.x up to 18.x before 18.0.0.203; Linux: prior to 11.2.202.481), Adobe AIR before 18.0.0.180, and AIR SDK/Compiler before 18.0.0.180, enabling arbitrary code execution via unspecified vecto...

Adobe Flash Player <= 18.0.0.194 Multiple Vulnerabilities (APSB15-16) (Mac OS X)

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 18.0.0.194. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists that allows an attacker to guess the address for the Flash heap. CVE-2015-3097...

Updated cups-filters package fixes security vulnerability

A heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filters processed print jobs with a specially crafted line size. An attacker being able to submit print jobs could exploit this flaw to crash texttopdf or, possibly, execute arbitrary code with the privileges of...

Amazon Linux AMI : cups (ALAS-2015-559)

A string reference count bug was found in cupsd, causing premature freeing of string objects. An attacker can submit a malicious print job that exploits this flaw to dismantle ACLs protecting privileged operations, allowing a replacement configuration file to be uploaded which in turn allows the...

Medium: cups

Issue Overview: A string reference count bug was found in cupsd, causing premature freeing of string objects. An attacker can submit a malicious print job that exploits this flaw to dismantle ACLs protecting privileged operations, allowing a replacement configuration file to be uploaded which in...

DSA-3303-1 cups-filters - security update

Bulletin has no description...

SUSE-SU-2015:1377-1 Security update for cups-filters

cups-filters was updated to fix two security issues. These security issues were fixed: - CVE-2015-3279: Texttopdf integer overflow incomplete fix for CVE-2015-3258 bsc937018. - CVE-2015-3258: Texttopdf heap-based buffer overflow bsc936281...

FreeBSD : cups-filters -- texttopdf integer overflow (bf1d9331-21b6-11e5-86ff-14dae9d210b8)

Stefan Cornelius from Red Hat reports : An integer overflow flaw leading to a heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filter processed print jobs with a specially crafted line size. An attacker being able to submit print jobs could exploit this flaw to...

MGASA-2015-0257 Updated tidy package fixes security vulnerability

A heap-based buffer overflow in tidy could have unspecified impact when processing user-supplied input...

Updated tidy package fixes security vulnerability

A heap-based buffer overflow in tidy could have unspecified impact when processing user-supplied input...

Unitronics VisiLogic OPLC IDE Vulnerabilities (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-274-02 Unitronics VisiLogic OPLC IDE Vulnerabilities that was published November 12, 2015, on the NCCIC/ICS-CERT web site. HP’s Zero Day Initiative ZDI reported to ICS-CERT that Steven Seeley of Source Incite,...

cups-filters -- texttopdf integer overflow

Stefan Cornelius from Red Hat reports: An integer overflow flaw leading to a heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filter processed print jobs with a specially crafted line size. An attacker being able to submit print jobs could exploit this flaw to...

CVE-2015-3279

Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow...

CVE-2015-0848

CVE-2015-0848 affects libwmf (0.2.8.4). A heap-based buffer overflow occurs when processing WMF files with embedded BMP images, enabling remote attackers to crash or possibly execute arbitrary code. Public advisories/updates across distributions fix libwmf to newer releases (e.g., 0.2.8.4-14 and ...