SuSE 11.2 Security Update: libpoppler-devel (2009-12-22)

This update of libpoppler5 fixes various security issues. CVE-2009-0791: Fix multiple integer overflows in 'pdftops' filter that could be used by attackers to execute code. CVE-2009-3607: Integer overflow in the createsurfacefromthumbnaildata function in glib/poppler-page.cc in Poppler 0.x allows...

openSUSE Security Update : libpoppler-devel (libpoppler-devel-1740)

This update of libpoppler3 fixes various security issues. CVE-2009-0791: Fix multiple integer overflows in 'pdftops' filter that could be used by attackers to execute code. CVE-2009-3607: Integer overflow in the createsurfacefromthumbnaildata function in glib/poppler-page.cc in Poppler 0.x allows...

Mandriva Security Advisory MDVSA-2009:334 (poppler)

The remote host is missing an update to poppler announced via advisory MDVSA-2009:334. OpenVAS Vulnerability Test $Id: mdksa2009334.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:334 poppler Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

CVE-2009-3938

Poppler (libpoppler) contains a buffer overflow in ABWOutputDev::endWord in ABWOutputDev.cc, exploitable via a crafted PDF and affecting versions including 0.10.6 and 0.12.0 (used by Abiword pdftoabw). The issue could cause denial of service and may allow arbitrary code execution. The vulnerabili...

Adobe Acrobat Reader up to 9.1.1 ONLY Linux integer overflow to heap overflow.

Vulnerability like in topic connected with vulns in xpdf. More details available here: ====== Last few weeks I was talkingmailing with Derek xpdf developer – btw. really nice guy about some vulnerabilities in his product. 14th of October he published path for bugs not only my vulnerabilites so i...

Security fix for the ALT Linux 5 package poppler5 version 0.12.1-alt1

Oct. 19, 2009 Sergey V Turchin 0.12.1-alt1 - new version - add linker version script for libpoppler - security fixes: - CVE-2009-3608 ObjectStream integer overflow...

openSUSE Security Update : libpoppler-devel (libpoppler-devel-77)

This update fixes an code execution bug. CVE-2008-2950 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libpoppler-devel-77. The text description of this plugin is C SUSE LLC...

Poppler <= 0.8.4 libpoppler uninitialized pointer Code Execution PoC

No description provided by source. Felipe Andres Manzano [email protected] updates in http://felipe.andres.manzano.googlepages.com/home ''' Sumary: ======= The libpoppler pdf rendering library, can free uninitialized pointers, leading to arbitrary code execution. This vulnerability result...

Poppler 0.8.4 - libpoppler Uninitialized pointer Code Execution

Poppler 0.8.4 - libpoppler Uninitialized pointer Code Execution Felipe Andres Manzano [email protected] updates in http://felipe.andres.manzano.googlepages.com/home ''' Sumary: ======= The libpoppler pdf rendering library, can free uninitialized pointers, leading to arbitrary code...

Poppler <= 0.8.4 libpoppler uninitialized pointer Code Execution PoC

Exploit for linux platform in category local exploits ==================================================================== Poppler = 0.8.4 libpoppler uninitialized pointer Code Execution PoC ==================================================================== Felipe Andres Manzano email protected...

Poppler 0.8.4 - libpoppler Uninitialized pointer Code Execution

Felipe Andres Manzano [email protected] updates in http://felipe.andres.manzano.googlepages.com/home ''' Sumary: ======= The libpoppler pdf rendering library, can free uninitialized pointers, leading to arbitrary code execution. This vulnerability results from memory management bugs in th...

Code injection

The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document...

CVE-2008-2950

The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document...

CVE-2008-2950

The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document...

poppler -- uninitialized pointer

Felipe Andres Manzano reports: The libpoppler pdf rendering library, can free uninitialized pointers, leading to arbitrary code execution. This vulnerability results from memory management bugs in the Page class constructor/destructor...

Debian DSA-1352-1 : pdfkit.framework - integer overflow

It was discovered that an integer overflow in the xpdf PDF viewer may lead to the execution of arbitrary code if a malformed PDF file is opened. pdfkit.framework includes a copy of the xpdf code and required an update as well. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

DSA-1352-1 pdfkit.framework - integer overflow

Bulletin has no description...

[SECURITY] [DSA 1350-1] New tetex-bin packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1350-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 6th, 2007 http://www.debian.org/security/faq -...

DSA-1350-1 tetex-bin

Bulletin has no description...

[USN-410-1] poppler vulnerability

=========================================================== Ubuntu Security Notice USN-410-1 January 18, 2007 kdegraphics, koffice, poppler vulnerability CVE-2007-0104 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.10...