Mandrake Linux Security Advisory : pdftohtml (MDKSA-2007:223)

Alin Rad Pop found several flaws in how PDF files are handled in pdftohtml. An attacker could create a malicious PDF file that would cause pdftohtml to crash or potentially execute arbitrary code when opened. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C...

openSUSE 10 Security Update : pdftohtml (pdftohtml-4642)

A buffer overflow in the xpdf code contained in pdftohtml could be exploited by attackers to potentially execute arbitrary code CVE-2007-4352, CVE-2007-5392, CVE-2007-5393. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

openSUSE 10 Security Update : pdftohtml (pdftohtml-2475)

This update fixes a vulnerability which occurs while processing a special PDF file. This bug can lead to a denial-of-service condition, or a memory corruption, or to arbitrary code execution. CVE-2007-0104 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

Mandrake Linux Security Advisory : pdftohtml (MDKSA-2007:019)

The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, kpdf in KDE before 3.5.5, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, via a PDF file with a 1 craft...

[ MDKSA-2007:019 ] - Updated pdftohtml packages fix crafted pdf file vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:019 http://www.mandriva.com/security/ Package : pdftohtml Date : January 18, 2007 Affected: 2006.0, 2007.0 Problem Description: The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, kpdf in...

Debian DSA-983-1 : pdftohtml - several vulnerabilities

Derek Noonburg has fixed several potential vulnerabilities in xpdf, which are also present in pdftohtml, a utility that translates PDF documents into HTML format. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Debian DSA-962-1 : pdftohtml - buffer overflows

'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf which are also present in pdftohtml, a utility that translates PDF documents into HTML format, and which can lead to a denial of service by crashing the application or possibly to the execution of arbitrary code...

CVE-2006-1244

CVE-2006-1244 describes an unspecified vulnerability in certain xpdf-using components after version 3.00 (affecting pdfkit.framework, gpdf, pdftohtml, and libextractor) with unknown impact and user-assisted attack vectors. The description cites possible issues in gmem.c, SplashXPathScanner.cc, JB...

CVE-2006-1244: Undefined Security Weakness

Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including a pdfkit.framework, b gpdf, c pdftohtml, and d libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in 1 gmem.c, 2 SplashXPathScanner.cc, 3 JBIG2Stream.c...

[SECURITY] [DSA 983-1] New pdftohtml packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 983-1 [email protected] http://www.debian.org/security/ Martin Schulze February 28th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 983-1] New pdftohtml packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 983-1 [email protected] http://www.debian.org/security/ Martin Schulze February 28th, 2006 http://www.debian.org/security/faq -...

DSA-983-1 pdftohtml - several

Bulletin has no description...

[SECURITY] [DSA 962-1] New pdftohtml packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 962-1 [email protected] http://www.debian.org/security/ Martin Schulze February 1st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 962-1] New pdftohtml packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 962-1 [email protected] http://www.debian.org/security/ Martin Schulze February 1st, 2006 http://www.debian.org/security/faq -...

DSA-962-1 pdftohtml - buffer overflows

Bulletin has no description...

GLSA-200601-17 : Xpdf, Poppler, GPdf, libextractor, pdftohtml: Heap overflows

The remote host is affected by the vulnerability described in GLSA-200601-17 Xpdf, Poppler, GPdf, libextractor, pdftohtml: Heap overflows Chris Evans has reported some integer overflows in Xpdf when attempting to calculate buffer sizes for memory allocation, leading to a heap overflow and a...

[ GLSA 200601-17 ] Xpdf, Poppler, GPdf, libextractor, pdftohtml: Heap overflows

Gentoo Linux Security Advisory GLSA 200601-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Xpdf, Poppler, GPdf, libextractor, pdftohtml: Heap overflows

Background Xpdf is a PDF file viewer that runs under the X Window System. Poppler is a PDF rendering library based on the Xpdf 3.0 code base. GPdf is a PDF file viewer for the GNOME 2 platform, also based on Xpdf. libextractor is a library which includes Xpdf code to extract arbitrary meta-data...

CVE-2005-3628

CVE-2005-3628 is a buffer overflow in JBIG2Bitmap::JBIG2Bitmap in JBIG2Stream.cc of Xpdf (and derivatives like gpdf, kpdf, pdftohtml, poppler, etc.). The vulnerability could allow attackers to modify memory and potentially execute arbitrary code. OpenVAS/Slackware/Debian OpenVAS entries reference...

CVE-2005-3628

Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors...