UBUNTU-CVE-2022-38234

XPDF commit ffaf11c was discovered to contain a segmentation violation via Lexer::getObjObject at /xpdf/Lexer.cc...

Buffer overflow

XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObjObject at /xpdf/Lexer.cc...

UBUNTU-CVE-2022-38236

XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObjObject at /xpdf/Lexer.cc...

CVE-2022-38236

CVE-2022-38236 relates to the XPDF project where commit ffaf11c introduces a global-buffer overflow via the function Lexer::getObj(Object*) in /xpdf/Lexer.cc. The vulnerability affects the XPDF code path associated with object parsing and can impact confidentiality, integrity, and availability as...

CVE-2022-38236

XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObjObject at /xpdf/Lexer.cc...

CVE-2022-38236

XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObjObject at /xpdf/Lexer.cc...

CVE-2022-38234

XPDF vulnerability CVE-2022-38234 stems from commit ffaf11c, where Lexer::getObj(Object*) in /xpdf/Lexer.cc can cause a segmentation fault. Affected component is the XPDF project (PDF reader), with exploitation as a local threat and high impact to availability per CVSS metrics (AV:L, AC:L, PR:N, ...

CVE-2022-38234

XPDF commit ffaf11c was discovered to contain a segmentation violation via Lexer::getObjObject at /xpdf/Lexer.cc...

CVE-2022-38234

XPDF commit ffaf11c was discovered to contain a segmentation violation via Lexer::getObjObject at /xpdf/Lexer.cc...

PT-2022-24305 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF version ffaf11c Description: A global-buffer overflow issue was discovered in XPDF via the Lexer::getObjObject function at /xpdf/Lexer.cc. This issue can be exploited, potentially leading to unintended consequences. Recommendations: For...

XPDF 安全漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF commit id ffaf11c has a security vulnerability that originates from /xpdf/Lexer.cc in Lexer::getObjObject contains a global buffer overflow...

PT-2022-24303 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A segmentation violation was discovered in XPDF via the Lexer::getObjObject function at /xpdf/Lexer.cc. This issue was identified in XPDF commit ffaf11c. Recommendations: At the moment, there ...

XPDF 代码问题漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF has a code issue vulnerability that stems from Lexer::getObjObject in /xpdf/Lexer.cc contains a segmentation violation...

[SECURITY] Fedora 36 Update: nex-20210330-4.fc36

Nex is a lexer similar to Lex/Flex that: 1 generates Go code instead of C code, 2 integrates with Go's Yacc instead of YACC/Bison, 3 supports UTF-8, and 4 supports nested structural regular expressions...

[SECURITY] Fedora 36 Update: golang-github-sourcegraph-syntaxhighlight-0-0.12.20180418gitbd320f5.fc36

Syntaxhighlight provides syntax highlighting for code. It currently uses a language-independent lexer and performs decently on JavaScript, Java, Ruby, Python, Go, and C...

[SECURITY] Fedora 35 Update: nex-20210330-2.fc35

Nex is a lexer similar to Lex/Flex that: 1 generates Go code instead of C code, 2 integrates with Go's Yacc instead of YACC/Bison, 3 supports UTF-8, and 4 supports nested structural regular expressions...

[SECURITY] Fedora 35 Update: golang-github-sourcegraph-syntaxhighlight-0-0.11.20180418gitbd320f5.fc35

Syntaxhighlight provides syntax highlighting for code. It currently uses a language-independent lexer and performs decently on JavaScript, Java, Ruby, Python, Go, and C...

PT-2022-6566

Name of the Vulnerable Software and Affected Versions Sqlalchemy mako versions prior to 1.2.2 Description The issue is related to insufficient input validation when handling regular expressions in the Lexer class, which can be exploited by a remote attacker to launch a denial-of-service attack...

Voltron - A Hacky Debugger UI For Hackers

Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs, you ca...

[SECURITY] Fedora 34 Update: php-twig3-3.3.8-1.fc34

The flexible, fast, and secure template engine for PHP. Fast: Twig compiles templates down to plain optimized PHP code. The overhead compared to regular PHP code was reduced to the very minimum. Secure: Twig has a sandbox mode to evaluate untrusted template code. This allows Twig to be used as a...