SUSE-SA:2006:001: xpdf,kpdf,gpdf,kword

The remote host is missing the patch for the advisory SUSE-SA:2006:001 xpdf,kpdf,gpdf,kword. 'infamous41md', Chris Evans and Dirk Mueller discovered multiple places in xpdf code where integer variables are insufficiently checked for range or overflow. Specially crafted PDF files could lead to...

USN-236-2: xpdf vulnerabilities in kword, kpdf

USN-236-1 fixed several vulnerabilities in xpdf. kpdf and kword contain copies of xpdf code and are thus vulnerable to the same issues. For reference, this is the original advisory: Chris Evans discovered several integer overflows in the XPDF code, which is present in xpdf, the Poppler library, a...

CVE-2005-3192

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as 1 Poppler, 2 teTeX, 3 KDE kpdf, and 4 pdftohtml, 5 KOffice KWord, 6 CUPS, and 7 libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps number o...

CVE-2005-3192

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as 1 Poppler, 2 teTeX, 3 KDE kpdf, and 4 pdftohtml, 5 KOffice KWord, 6 CUPS, and 7 libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps number o...

Slackware 10.0 / 10.1 / 10.2 / 9.1 / current : KOffice/KWord (SSA:2005-310-02)

New KOffice packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue with KWord. A buffer overflow in the RTF import functionality could result in the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

DSA-872-1 koffice - buffer overflow

Bulletin has no description...

CVE-2005-2971

Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file...

CVE-2005-2971

Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file...

CVE-2005-2971

Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file...

CVE-2005-2971

CVE-2005-2971 : Heap-based buffer overflow in the KWord RTF importer of KOffice 1.2.0–1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file. Root cause: buffer overflow in the importer. Affected software is the KWord component of KOffice; multiple advisories (e.g., Debian...

GLSA-200510-12 : KOffice, KWord: RTF import buffer overflow

The remote host is affected by the vulnerability described in GLSA-200510-12 KOffice, KWord: RTF import buffer overflow Chris Evans discovered that the KWord RTF importer was vulnerable to a heap-based buffer overflow. Impact : An attacker could entice a user to open a specially crafted RTF file,...

KOffice, KWord: RTF import buffer overflow

Background KOffice is an integrated office suite for KDE. KWord is the KOffice word processor. Description Chris Evans discovered that the KWord RTF importer was vulnerable to a heap-based buffer overflow. Impact An attacker could entice a user to open a specially-crafted RTF file, potentially...

[KDE Security Advisory] KOffice/KWord RTF import buffer overflow

KDE Security Advisory: KWord RTF import buffer overflow Original Release Date: 2005-10-11 URL: http://www.kde.org/info/security/advisory-20051011-1.txt 0. References CAN-2005-2971 CESA-2005-005 1. Systems affected: All KOffice releases starting from KOffice 1.2.0 up to including KOffice 1.4.1. 2...