PDFlib: Multiple buffer overflows

Background PDFlib is a library for generating PDF on the fly. Description poplix reported multiple boundary errors in the pdcfsearchfopen function when processing overly long filenames. Impact A remote attacker could send specially crafted content to a vulnerable application using PDFlib, possibl...

CVE-2007-6561

Multiple stack-based buffer overflows in PDFLib allow user-assisted remote attackers to execute arbitrary code via a long filename argument to the PDFloadimage function that results in an overflow in the pdcfsearchfopen function, and possibly other vectors...

Stack overflow

Multiple stack-based buffer overflows in PDFLib allow user-assisted remote attackers to execute arbitrary code via a long filename argument to the PDFloadimage function that results in an overflow in the pdcfsearchfopen function, and possibly other vectors...

CVE-2007-6561

PDFlib contains multiple stack-based buffer overflows that can be triggered by a long filename argument to PDF_load_image, causing an overflow in pdc_fsearch_fopen and possibly other vectors. Impact is remote code execution under the privileges of the vulnerable application. The issue is document...

CVE-2007-6561

Multiple stack-based buffer overflows in PDFLib allow user-assisted remote attackers to execute arbitrary code via a long filename argument to the PDFloadimage function that results in an overflow in the pdcfsearchfopen function, and possibly other vectors...

PDFlib多个缓冲区溢出漏洞

BUGTRAQ ID: 27001 CNCAN ID:CNCAN-2007122707 PDFlib是一款在服务器端批量生成PDF文档的功能强大的软件包。 PDFlib存在多个缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 PDFloadimage处理超长文件名存在堆栈缓冲区溢出，另外pdflib pecl扩展的PHP wrapper也存在此问题。 PDFLib 7.0.2 ---------- 目前没有解决方案提供： http://www.pdflib.com/ ?php ..... PDFloadimage$p,"jpeg",strrepeat"A",1100...

PDFlib多个远程缓冲区溢出漏洞

BUGTRAQ ID: 27001 PDFlib是用于生成PDF文件的函数库。 pdflib错误地使用了strcpy函数，导致多个缓冲区溢出漏洞。 其中一个有漏洞函数为pdcfsearchfopen，当PDFloadimage调用该函数时，如果提供了超长的文件名的话就会溢出栈缓冲区。 如果使用该函数库的Web应用受骗打开了恶意网页的话，就可能触发这些溢出，导致拒绝服务或执行任意指令。 PDFlib GmbH PDFLib 7.0.2 PDFlib GmbH ----------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

PDFlib 7.0.2 - Multiple Remote Buffer Overflow Vulnerabilities

PDFlib 7.0.2 - Multiple Remote Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/27001/info PDFlib is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input. Attackers can exploit these issues to execut...

PDFlib 7.0.2 - Multiple Remote Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/27001/info PDFlib is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input. Attackers can exploit these issues to execute arbitrary code in the context of applications that use the...

pdflib buffer overflow

Buffer overflow during PDF generation on oversized PDF file...

pdflib long filename multiple bufferoverflows

hi, pdflib, a library for generating PDF on the fly, avilable at http:// www.pdflib.com, is vulnerable to multiple bufferoverflows due to a misuse of strcpy. An attacker can exploit this issue to execute arbitrary code or to crash the application that uses the library. One of the vulnerable...

[Full-Disclosure] [ GLSA 200412-02 ] PDFlib: Multiple overflows in the included TIFF library

Gentoo Linux Security Advisory GLSA 200412-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

PDFlib: Multiple overflows in the included TIFF library

Background PDFlib is a library providing functions to handle PDF files. It includes a modified TIFF library used to process TIFF images. Description The TIFF library is subject to several known vulnerabilities see GLSA 200410-11. Most of these overflows also apply to PDFlib. Impact A remote...

GLSA-200412-02 : PDFlib: Multiple overflows in the included TIFF library

The remote host is affected by the vulnerability described in GLSA-200412-02 PDFlib: Multiple overflows in the included TIFF library The TIFF library is subject to several known vulnerabilities see GLSA 200410-11. Most of these overflows also apply to PDFlib. Impact : A remote attacker could enti...