[SECURITY] Fedora 28 Update: libgxps-0.3.0-4.fc28

libgxps is a GObject based library for handling and rendering XPS documents...

CVE-2018-10733

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

Libgxps Buffer Overflow Vulnerability

libgxps is a library for processing XPS documents based on GObject a C-based framework. A heap buffer overflow vulnerability exists in the 'ftfontfacehash' function of the gxps-fonts.c file in libgxps 0.3.0 and earlier. A remote attacker can exploit this vulnerability with specially crafted input...

libgxps gxps-images.c File Stack Buffer Out-of-Bounds Read Vulnerability

libgxps is a library for processing XPS documents based on GObject a C-based framework. A stack buffer out-of-bounds read vulnerability exists in the Glib call to the 'gxpsimagesguesscontenttype' function in the gxps-images.c file in libgxps 0.3.0 and earlier, which stems from the program receivi...

DEBIAN-CVE-2018-10767

There is a stack-based buffer over-read in calling GLib in the function gxpsimagesguesscontenttype of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a ginputstreamread call. A crafted input will lead to a remote denial of service attack...

CVE-2018-10767

There is a stack-based buffer over-read in calling GLib in the function gxpsimagesguesscontenttype of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a ginputstreamread call. A crafted input will lead to a remote denial of service attack...

CVE-2018-10767

There is a stack-based buffer over-read in calling GLib in the function gxpsimagesguesscontenttype of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a ginputstreamread call. A crafted input will lead to a remote denial of service attack...

UBUNTU-CVE-2018-10767

There is a stack-based buffer over-read in calling GLib in the function gxpsimagesguesscontenttype of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a ginputstreamread call. A crafted input will lead to a remote denial of service attack...

CVE-2018-10767

There is a stack-based buffer over-read in calling GLib in the function gxpsimagesguesscontenttype of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a ginputstreamread call. A crafted input will lead to a remote denial of service attack...

CVE-2018-10767

CVE-2018-10767 is a vulnerability in libgxps up to version 0.3.0, caused by a stack-based buffer over-read in gxps_images_guess_content_type (gxps-images.c) when negative return values from g_input_stream_read are not rejected. A crafted input can trigger a remote denial of service. The connected...

CVE-2018-10733

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

Heap overflow

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

CVE-2018-10733

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

CVE-2018-10733

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

UBUNTU-CVE-2018-10733

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

CVE-2018-10733

The CVE-2018-10733 issue is a heap-based buffer over-read in the libgxps component, specifically in ft_font_face_hash of gxps-fonts.c, affected through libgxps up to version 0.3.0. A crafted input can enable a remote denial of service. Connected advisories from multiple distributions (e.g., SUSE,...

CVE-2018-10733

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

Debian: Security Advisory (DLA-1054-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the caseless_hash function in the libgxps library, which allows a hacker to trigger a service failure

The vulnerability of the caselesshash function in the libgxps library exists due to the swapping of a null pointer. Exploiting this vulnerability could allow an attacker acting locally to cause a service failure...

MGASA-2017-0318 Updated libgxps packages fix security vulnerability

There is a NULL pointer dereference in the caselesshash function in gxps-archive.c in libgxps 0.2.5. A crafted input will lead to a denial of service attack CVE-2017-11590...