CVE-2015-6778

CVE-2015-6778 affects PDFium in Chrome before 47.0.2526.73. The vulnerability is an out-of-bounds read in CJBig2_SymbolDict.cpp (JBIG2 data in PDFs) that could allow a remote attacker to cause a denial of service or other impact via crafted JBIG2 data. Public references corroborate the flaw in PD...

CVE-2015-6778

Removed by vendor...

Oracle: Security Advisory (ELSA-2009-1504)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome PDFium Integer Overflow Vulnerability

Google Chrome is an open source WEB browser. An integer overflow vulnerability exists in the CJBig2Image::expand function in fxcodec/jbig2/JBig2Image.cpp in Google Chrome PDFium, which allows attackers to construct a malicious WEB page and trick users into parsing it, which can execute arbitrary...

Adobe Acrobat Reader - JBIG2 Universal Exploit (Bind Shell Port 5500)

No description provided by source. Adobe Acrobat Reader JBIG2 Universal Exploit Bind Shell port 5500 write up: http://bl4cksecurity.blogspot.com/2009/03/adobe-acrobatreader-universal-exploit.html down: http://blacksecurity.org/download/66/AdobeJBIG2UniversalReaderAcrobatExploit back:...

Adobe Acrobat Reader - JBIG2 Local Buffer Overflow PoC (2) (0day)

No description provided by source. !/usr/bin/perl ksOSe 02/22/2009 http://vrt-sourcefire.blogspot.com/2009/02/have-nice-weekend-pdf-love.html my $size = \x40\x00; my $factor = ABCD; my $data = A x 8314; print pdf; sub pdf %PDF-1.5\n . %\xec\xf5\xf2\xe1\xe4\xef\xe3\xf5\xed\xe5\xee\xf4\n . 3 0 \n...

Multiple PDF Readers - JBIG2 Local Buffer Overflow PoC

No description provided by source. causes an exception at 41414141 http://www.exploit-db.com/sploits/2009-41414141.pdf milw0rm.com 2009-02-23...

Adobe Products JBIG2 Stream Buffer Overflow - Ver2 (CVE-2009-0658)

A buffer overflow vulnerability has been reported in Adobe products. The vulnerability is due to errors in Adobe products that fail to sufficiently validate input when processing embedded JBIG2 streams within PDF documents. A remote attacker could exploit this vulnerability via a specially crafte...

Adobe Reader And Acrobat PDF JBIG2 Stream Heap Memory Corruption (CVE-2009-1861)

A heap corruption vulnerability has been reported in Adobe Reader and Acrobat...

CVE-2013-1025

Buffer overflow in CoreGraphics in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted JBIG2 data in a PDF document...

Buffer overflow

Buffer overflow in CoreGraphics in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted JBIG2 data in a PDF document...

CVE-2013-1025

Buffer overflow in CoreGraphics in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted JBIG2 data in a PDF document...

CVE-2013-1025

CVE-2013-1025 describes a CoreGraphics JBIG2 buffer overflow in macOS OS X before 10.8.5 that could allow remote code execution or a denial of service via crafted JBIG2 data in PDF files. Connected sources confirm the issue as a PDF JBIG2 processing vulnerability in CoreGraphics; OS X Mountain Li...

Apple Mac OS X PDF文件缓冲区溢出漏洞(CVE-2013-1025)

BUGTRAQ ID: 62368 CVECAN ID: CVE-2013-1025 Apple Mac OS X是苹果电脑操作系统软件。 Mac OS X 10.8 - 10.8.4在处理PDF文件内JBIG2编码的数据时存在缓冲区溢出漏洞，远程攻击者通过特制的PDF文件，利用此漏洞可造成应用终止或执行任意代码。 0 Apple Mac OS X 10.8 - 10.8.4 Apple Mac OS X 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（HT5880）以及相应补丁: HT5880：About the security content of OS ...

Oracle Linux 4 : tetex (ELSA-2010-0399)

From Red Hat Security Advisory 2010:0399 : Updated tetex packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

Scientific Linux Security Update : kdegraphics on SL4.x, SL5.x i386/x86_64

Multiple integer overflow flaws were found in KPDF's JBIG2 decoder. An attacker could create a malicious PDF file that would cause KPDF to crash or, potentially, execute arbitrary code when opened. CVE-2009-0147, CVE-2009-1179 Multiple buffer overflow flaws were found in KPDF's JBIG2 decoder. An...

Scientific Linux Security Update : poppler on SL5.x i386/x86_64

Multiple integer overflow flaws were found in poppler. An attacker could create a malicious PDF file that would cause applications that use poppler such as Evince to crash or, potentially, execute arbitrary code when opened. CVE-2009-0147, CVE-2009-1179, CVE-2009-1187, CVE-2009-1188 Multiple buff...

Scientific Linux Security Update : tetex on SL5.x i386/x86_64

Multiple integer overflow flaws were found in the way teTeX processed special commands when converting DVI files into PostScript. An attacker could create a malicious DVI file that would cause the dvips executable to crash or, potentially, execute arbitrary code. CVE-2010-0739, CVE-2010-1440...

Scientific Linux Security Update : tetex on SL4.x i386/x86_64

A buffer overflow flaw was found in the way teTeX processed virtual font files when converting DVI files into PostScript. An attacker could create a malicious DVI file that would cause the dvips executable to crash or, potentially, execute arbitrary code. CVE-2010-0827 Multiple integer overflow...

Scientific Linux Security Update : xpdf on SL3.x, SL4.x i386/x86_64

Multiple integer overflow flaws were found in Xpdf's JBIG2 decoder. An attacker could create a malicious PDF file that would cause Xpdf to crash or, potentially, execute arbitrary code when opened. CVE-2009-0147, CVE-2009-1179 Multiple buffer overflow flaws were found in Xpdf's JBIG2 decoder. An...