CVE-2010-2575

CVE-2010-2575 affects Okular (KDE SC 4.3.0–4.5.0). A heap-based overflow in the RLE decompression path (TranscribePalmImageToJPEG in generators/plucker/inplug/image.cpp) can be triggered by a crafted image inside a PDB/PDF, enabling either a crash or remote arbitrary code execution. Multiple conn...

KDE okular buffer overflow

Dynamic memory overflow on PDB files processing...

Secunia Research: KDE Okular PDB Parsing RLE Decompression Buffer Overflow

====================================================================== Secunia Research 25/08/2010 - KDE Okular PDB Parsing RLE Decompression Buffer Overflow - ====================================================================== Table of Contents Affected...

Fedora 13 : kdegraphics-4.4.5-3.fc13 (2010-13629)

CVE-2010-2575, Okular PDB Processing Memory Corruption Vulnerability. For more infos please take a look at the http://www.kde.org/info/security/advisory-20100825-1.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 12 : kdegraphics-4.4.5-3.fc12 (2010-13661)

CVE-2010-2575, Okular PDB Processing Memory Corruption Vulnerability. For more infos please take a look at the http://www.kde.org/info/security/advisory-20100825-1.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Ubuntu 9.04 / 9.10 / 10.04 LTS : kdegraphics vulnerability (USN-979-1)

Stefan Cornelius of Secunia Research discovered a boundary error during RLE decompression in the 'TranscribePalmImageToJPEG' function in generators/plucker/inplug/image.cpp of okular when processing images embedded in PDB files, which can be exploited to cause a heap-based buffer overflow...

Fedora 14 : kdegraphics-4.5.0-2.fc14 (2010-13589)

CVE-2010-2575, Okular PDB Processing Memory Corruption Vulnerability. For more infos please take a look at the http://www.kde.org/info/security/advisory-20100825-1.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Altap Salamander 2.5 PE Viewer Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Altap...

SLES9: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsmbclient libsmbclient-devel samba samba-client samba-doc samba-pdb samba-python samba-vscan samba-winbind For more information, please visit the referenc...

SLES9: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsmbclient libsmbclient-devel samba samba-client samba-doc samba-pdb samba-python samba-vscan samba-winbind For more information, please visit the referenc...

SLES9: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: samba-winbind samba-pdb libsmbclient samba libsmbclient-devel samba-doc samba-vscan samba-client samba-python For more information, please visit the referenc...

SLES9: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsmbclient samba-vscan samba libsmbclient-devel samba-winbind samba-python samba-doc samba-pdb samba-client For more information, please visit the referenc...

SLES9: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsmbclient libsmbclient-devel samba samba-client samba-doc samba-pdb samba-python samba-vscan samba-winbind For more information, please visit the referenc...

SLES9: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: samba libsmbclient samba-pdb samba-doc samba-client libsmbclient-devel samba-vscan samba-python samba-winbind More details may also be found by searching for...

SLES9: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsmbclient libsmbclient-devel samba samba-client samba-doc samba-pdb samba-python samba-vscan samba-winbind For more information, please visit the referenc...

SLES9: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsmbclient samba-vscan samba libsmbclient-devel samba-winbind samba-python samba-doc samba-pdb samba-client For more information, please visit the referenc...

SLES9: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: samba-client samba-doc samba-python samba-pdb samba samba-winbind libsmbclient-devel libsmbclient samba-vscan For more information, please visit the referenc...

openSUSE 10 Security Update : samba (samba-3827)

The previous security fix for CVE-2007-2447 missed one character in the shell escape handling. Also fixed were some regressions introduced by the previous update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSU...

Stack overflow

Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 English Trial, and 2.0 with Portable Executable Viewer 1.00 English Trial, allows remote attackers to execute arbitrary code via a long PDB debug filename in a PE file...

CVE-2007-3314

Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 English Trial, and 2.0 with Portable Executable Viewer 1.00 English Trial, allows remote attackers to execute arbitrary code via a long PDB debug filename in a PE file...