631 matches found
IBM ISS: Adobe JBIG2 exploits being spammed out
PDFs containing exploits for the recent 0-day vulnerability in Acrobat Reader are now being actively sent out through spambots. The folks at the IBM ISS X-Force say they’re seeing infected PDFs being spammed out and that it looks like the traffic is mainly coming from Taiwan, though those may be...
Foxit Reader Multiple Vulnerabilities Mar-09
The host is installed with Foxit Reader and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbfoxitreadermultvulnmar09.nasl 5656 2017-03-21 11:03:12Z cfi $ Foxit Reader Multiple Vulnerabilities Mar-09 Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Adobe Reader < 9.1 / 8.1.4 / 7.1.1 Multiple Vulnerabilities
The version of Adobe Reader installed on the remote host is earlier than 9.1 / 8.1.4 / 7.1.1. Such versions are reportedly affected by multiple vulnerabilities : - An integer buffer overflow can be triggered when processing a malformed JBIG2 image stream with the '/JBIG2Decode' filter...
Foxit Reader PDF文件处理多个代码执行和绕过授权漏洞
BUGTRAQ ID: 34035 CVECAN ID: CVE-2009-0191,CVE-2009-0836,CVE-2009-0837 Foxit Reader是一款小型的PDF文档查看器和打印程序。 1 Foxit Reader在处理JBIG2符号字典段时存在错误，特制的PDF文件可能导致引用未经初始化的内存。 2 如果PDF文件中定义了Open/Execute a file操作，Foxit Reader可能会未经用户确认便打开或执行PDF文件创建者所定义的文件。 3 如果带有超长文件名参数的PDF文件中定义了Open/Execute a...
CVE-2009-0191
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized...
Memory corruption
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized...
CVE-2009-0191
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized...
CVE-2009-0191
Foxit Reader is vulnerable to remote code execution via a crafted PDF due to a JBIG2 symbol dictionary processing error (zero new symbols). Affected versions are Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506 (including 3.0.2009.1301). The issue can cause a dereference of uninitiali...
Secunia Research: Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability
====================================================================== Secunia Research 09/03/2009 - Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability - ====================================================================== Table of Contents Affected...
DEBIAN-CVE-2009-0756
The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::JBIG2SymbolDict and triggers an invalid memory dereference...
CVE-2009-0756
The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::JBIG2SymbolDict and triggers an invalid memory dereference...
Adobe Acrobat / Reader Buffer Overflow Vulnerability (APSA09-01) - Windows
Adobe Acrobat / Adobe Reader is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Adobe Reader JBIG2 image stream buffer overflow
Added: 02/27/2009 CVE: CVE-2009-0658 BID: 33751 OSVDB: 52073 Background Adobe Acrobat is software for creating PDF documents. Adobe Reader is free software for viewing PDF documents. Problem A buffer overflow vulnerability allows command execution when a user opens a PDF file containing a special...
Adobe Reader JBIG2 image stream buffer overflow
Added: 02/27/2009 CVE: CVE-2009-0658 BID: 33751 OSVDB: 52073 Background Adobe Acrobat is software for creating PDF documents. Adobe Reader is free software for viewing PDF documents. Problem A buffer overflow vulnerability allows command execution when a user opens a PDF file containing a special...
Adobe Reader JBIG2 image stream buffer overflow
Added: 02/27/2009 CVE: CVE-2009-0658 BID: 33751 OSVDB: 52073 Background Adobe Acrobat is software for creating PDF documents. Adobe Reader is free software for viewing PDF documents. Problem A buffer overflow vulnerability allows command execution when a user opens a PDF file containing a special...
Adobe Reader JBIG2 image stream buffer overflow
Added: 02/27/2009 CVE: CVE-2009-0658 BID: 33751 OSVDB: 52073 Background Adobe Acrobat is software for creating PDF documents. Adobe Reader is free software for viewing PDF documents. Problem A buffer overflow vulnerability allows command execution when a user opens a PDF file containing a special...
Adobe Acrobat Reader JBIG2 Local Buffer Overflow PoC #2 0day
No description provided by source. !/usr/bin/perl ksOSe 02/22/2009 http://vrt-sourcefire.blogspot.com/2009/02/have-nice-weekend-pdf-love.html my $size = "\x40\x00"; my $factor = "ABCD"; my $data = "A" x 8314; print pdf; sub pdf "%PDF-1.5\n" . "%\xec\xf5\xf2\xe1\xe4\xef\xe3\xf5\xed\xe5\xee\xf4\n"...
Security Best Practice: Protect Yourself against Adobe Multiple Products JBIG2 Stream Buffer Overflow Vulnerability
A buffer overflow vulnerability has been reported in Adobe Reader and Acrobat when handling PDF files that contain a JBIG2 stream. A remote attacker can exploit this vulnerability to execute arbitrary code on an affected system via a specially crafted PDF file. Portable Document Format PDF is an...
Adobe Acrobat Reader JBIG2 Local Buffer Overflow PoC #2 0day-vulnerability warning-the black bar safety net
!/ usr/bin/perl ksOSe 02/22/2009 http://vrt-sourcefire.blogspot.com/2009/02/have-nice-weekend-pdf-love.html my $size = "\x40\x00"; my $factor = "ABCD"; my $data = "A" x 8 3 1 4; print pdf; sub pdf "%PDF-1.5\n" . "%\xec\xf5\xf2\xe1\xe4\xef\the XE3\xf5\xed\xe5\xee\xf4\n" . "3 0 \n" . "xref\n" . "3 ...