Secunia Research: Adobe Reader JBIG2 Text Region Segment Buffer Overflow

====================================================================== Secunia Research 10/06/2009 - Adobe Reader JBIG2 Text Region Segment Buffer Overflow - ====================================================================== Table of Contents Affected...

Adobe Reader PDF Documents Containing Embedded JBIG2 Streams (CVE-2009-0509; CVE-2009-0510; CVE-2009-0511; CVE-2009-0512)

Portable Document Format PDF is an open file format created by Adobe Systems. Multiple vulnerabilities have been reported in Adobe Reader and Acrobat when handling PDF files that contain a JBIG2 stream. A remote attacker could trigger these flaws via a specially crafted PDF file. Successful...

Adobe Reader JBIG2 Parameters Memory Corruption (APSB09-07; CVE-2009-1858)

Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. A memory corruption vulnerability has been discovered in Adobe Reader and Acrobat. The...

Brad Arkin on Adobe's Quarterly Patch Updates, the JBIG2 Flaw and Secure Software Development

Dennis Fisher talks with Brad Arkin, director of product security and privacy at Adobe, about the company’s new quarterly patch release program, its Secure Product Lifecycle and how the JBIG2 flaw spurred major changes at Adobe. Download Subscribe to the Digital Underground podcast on Podcast aud...

RedHat Security Advisory RHSA-2009:0480

The remote host is missing updates announced in advisory RHSA-2009:0480. Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. Multiple integer overflow flaws were found in poppler. An attacker could create a malicious PDF file that would cause...

xpdf: Multiple integer overflows in JBIG2 decoder

Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service crash via a crafted PDF file, related to 1 JBIG2Stream::readSymbolDictSeg, 2 JBIG2Stream::readSymbolDictSeg, and 3...

PDF JBIG2 multiple input validation flaws

Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file...

xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195)

Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service crash via a crafted PDF file, related to 1 JBIG2SymbolDict::setBitmap and 2 JBIG2Stream::readSymbolDictSeg...

Important: Red Hat Security Advisory: poppler security update

Updated poppler packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Poppler is a Portable Document Format PDF rendering library, used by applications such...

FreeBSD Ports: cups-base

The remote host is missing an update to the system as announced in the referenced advisory. VID 736e55bc-39bb-11de-a493-001b77d09812 OpenVAS Vulnerability Test $ Description: Auto generated from VID 736e55bc-39bb-11de-a493-001b77d09812 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian Security Advisory DSA 1793-1 (kdegraphics)

The remote host is missing an update to kdegraphics announced via advisory DSA 1793-1. OpenVAS Vulnerability Test $Id: deb17931.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1793-1 kdegraphics Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1790-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandrake Security Advisory MDVSA-2009:101 (xpdf)

The remote host is missing an update to xpdf announced via advisory MDVSA-2009:101. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:101 (xpdf)

The remote host is missing an update to xpdf announced via advisory MDVSA-2009:101. OpenVAS Vulnerability Test $Id: mdksa2009101.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:101 xpdf Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

RHEL 4 : gpdf (RHSA-2009:0458)

An updated gpdf package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. GPdf is a viewer for Portable Document Format PDF files. Multiple integer overflow fla...

PDF JBIG2 invalid free()

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data...

PDF JBIG2 multiple input validation flaws

Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file...

xpdf: Freeing of potentially uninitialized memory in JBIG2 decoder

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service crash via a crafted PDF file that triggers a free of uninitialized memory...

openSUSE 10 Security Update : kdegraphics3 (kdegraphics3-6211)

This update fixes security problems while decoding JBIG2. CVE-2009-0146, CVE-2009-0147, CVE-2009-0165, CVE-2009-0166, CVE-2009-0799, CVE-2009-0800, CVE-2009-1179, CVE-2009-1180, CVE-2009-1181, CVE-2009-1182, CVE-2009-1183 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

Timeline of the Adobe JBIG2 PDF vulnerability

In this video from Dojosec, Matthew Watchinski from Sourcefire’s Vulnerability Research Team reveals the timeline, from discovery to sale to exploitation to disclosure to patch, of the Adobe JBIG PDF flaw...