Researchers: Google Aurora Attackers Back in Business?

Just when you thought it was safe to go back in your e-mail…Researchers say a new round of targeted attacks appear to come from the same group responsible for attacks against Google and other top U.S. firms. Writing on the Symantec Security blog...

Symantec generic PDF detection bypass

No description provided by source. Symantec multiple products - Generic PDF bypass Cheap plug : Speaking of PDF - If you are interested in client-side vulnerabilities visit HACK.LU starting tomorrow 28-30 Oct with : Workshop: Bypassing the Perimeter: Client Side Exploitation - Nitesh Dhanjani,...

Adobe Reader JBIG2 Page Information Integer Overflow (APSB09-07; CVE-2009-0509)

Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. A memory corruption vulnerability has been discovered in Adobe Reader and Acrobat. The...

Adobe Reader PDF Documents Containing Embedded JBIG2 Streams (CVE-2009-0509; CVE-2009-0510; CVE-2009-0511; CVE-2009-0512)

Portable Document Format PDF is an open file format created by Adobe Systems. Multiple vulnerabilities have been reported in Adobe Reader and Acrobat when handling PDF files that contain a JBIG2 stream. A remote attacker could trigger these flaws via a specially crafted PDF file. Successful...

Mandriva Update for cups MDKSA-2007:165 (cups)

Check for the Version of cups OpenVAS Vulnerability Test Mandriva Update for cups MDKSA-2007:165 cups Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

USN-603-1: poppler vulnerability

It was discovered that the poppler PDF library did not correctly handle certain malformed embedded fonts. If a user or an automated system were tricked into opening a malicious PDF, a remote attacker could execute arbitrary code with user privileges...

Mandrake Linux Security Advisory : cups (MDKSA-2007:165)

Maurycy Prodeus found an integer overflow vulnerability in the way various PDF viewers processed PDF files. An attacker could create a malicious PDF file that could cause cups to crash and possibly execute arbitrary code open a user opening the file. This update provides packages which are patche...

Adobe Reader Plugin AcroPDF.dll 8.0.0.0 - Resource Consumption

Adobe Reader Plugin AcroPDF.dll 8.0.0.0 - Resource Consumption !-------------------------------------------------------------------------------- Adobe PDF Reader plug-in AcroPDF.dll ver. 8.0.0.0 Resource Consumption author: shinnai mail: shinnaiatautisticidotorg site:...

Adobe Reader Plugin 'AcroPDF.dll' 8.0.0.0 - Resource Consumption

!-------------------------------------------------------------------------------- Adobe PDF Reader plug-in AcroPDF.dll ver. 8.0.0.0 Resource Consumption author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.altervista.org Well, Adobe guys do a good job after the publication of a...

USN-227-1: xpdf vulnerabilities

infamous41md discovered several integer overflows in the XPDF code, which is present in xpdf, the Poppler library, tetex-bin, KOffice, and kpdf. By tricking an user into opening a specially crafted PDF file, an attacker could exploit this to execute arbitrary code with the privileges of the...

USN-50-1: CUPS vulnerabilities

CAN-2004-1125: The recent USN-48-1 fixed a buffer overflow in xpdf. Since CUPS contains xpdf code to convert incoming PDF files to the PostScript format, this vulnerability applies to cups as well. In this case it could even lead to privilege escalation: if an attacker submitted a malicious PDF...

USN-48-1: xpdf, tetex-bin vulnerabilities

A potential buffer overflow has been found in the xpdf viewer. An insufficient input validation could be exploited by an attacker providing a specially crafted PDF file which, when processed by xpdf, could result in abnormal program termination or the execution of attacker supplied program code...

Important: Red Hat Security Advisory: acroread security update

An updated Adobe Acrobat Reader package that fixes a security issue is now available. The Adobe Acrobat Reader browser allows for the viewing, distributing, and printing of documents in portable document format PDF. iDEFENSE has reported that Adobe Acrobat Reader 5.0.9 contains a buffer overflow...

Important: Red Hat Security Advisory: cups security update

Updated cups packages that fix denial of service issues, a security information leak, as well as other various bugs are now available. The Common UNIX Printing System CUPS is a print spooler. During a source code audit, Chris Evans discovered a number of integer overflow bugs that affect xpdf. CU...

RHEL 2.1 : xpdf (RHSA-2003:197)

Updated Xpdf packages are available that fix a vulnerability where a malicious PDF document could run arbitrary code. Updated 21 July 2003 Updated packages are now available, as the original errata packages did not fix all possible ways of exploiting this vulnerability. Xpdf is an X Window System...

RHEL 2.1 : xpdf (RHSA-2002:307)

Updated Xpdf packages are available to fix a vulnerability where a malicious PDF document could run arbitrary code. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 Xpdf is an X Window System based viewer for Portable Document Format PDF files. During an audit of CUPS, a...

CVE-2003-0508

Buffer overflow in the WWWLaunchNetscape function of Adobe Acrobat Reader acroread 5.0.7 and earlier allows remote attackers to execute arbitrary code via a .pdf file with a long mailto link...

Adobe Unix Acrobat Reader 4.0/5.0 - WWWLaunchNetscape Buffer Overflow

source: https://www.securityfocus.com/bid/8069/info An individual has reported that Adobe Acrobat Reader for Unix systems is vulnerable to a buffer overflow condition. The error is allegedly related to the processing of hyperlinks, in the function "WWWLaunchNetscape". The flaw is triggered only...

Important: Red Hat Security Advisory: : : : Updated Xpdf packages fix security vulnerability

Updated Xpdf packages are available that fix a vulnerability where a malicious PDF document could run arbitrary code. Xpdf is an X Window System based viewer for Portable Document Format PDF files. During an audit of CUPS, a printing system, Zen Parsec found an integer overflow vulnerability in t...

Important: Red Hat Security Advisory: : Updated Xpdf packages fix security vulnerability.

Updated Xpdf packages are available that fix a vulnerability where a malicious PDF document could run arbitrary code. Updated 16 July 2003 Updated packages are now available, as the original errata packages did not fix all possible ways of exploiting this vulnerability. Xpdf is an X Window System...