xpdf: multiple integer overflows

Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF file that trigger...

Important: Red Hat Security Advisory: kdegraphics security update

Updated kdegraphics packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop Environment,...

acroread: Multiple DoS fixes in 8.1.7 (APSB09-15)

Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and earlier 9.x versions; 8.1.6 and earlier 8.x versions; and possibly 7.1.4 and earlier 7.x versions allows remote attackers to cause a denial of service application crash via a PDF file with a large number of open...

acroread: heap overflow fix in version 8.1.7 (APSB09-15)

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtaine...

Adobe Reader Compact Font Format Index Memory Corruption (APSB09-15; CVE-2009-2985)

Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. A memory corruption vulnerability has been discovered in Adobe Reader and Acrobat. The...

CVE-2009-2699

The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime APR library before 1.3.9, as used in the Apache HTTP Server before 2.2.14 and other products, does not properly handle errors, which allows remote attackers to cause a denial of service daemon...

CVE-2009-2699

The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime APR library before 1.3.9, as used in the Apache HTTP Server before 2.2.14 and other products, does not properly handle errors, which allows remote attackers to cause a denial of service daemon...

Preemptive Protection against Microsoft GDI+ PNG Integer Overflow Vulnerability (MS09-062)

A remote code execution vulnerability has been discovered in the way that GDI+ allocates memory. The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote attacker may trigger this issue via a...

PT-2009-5753

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 7.x through 7.1.3 Adobe Reader and Acrobat versions 8.x through 8.1.6 Adobe Reader and Acrobat versions 9.x through 9.1 Description A heap-based buffer overflow allows remote attackers to execute arbitrary cod...

Preemptive Protection against Microsoft GDI+ PNG Heap Overflow Vulnerability (MS09-062)

A remote code execution vulnerability has been discovered in the way that GDI+ allocates memory. The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote attacker may trigger this issue via a...

apr-util: Integer overflows in memory pool (apr) and relocatable memory (apr-util) management

Multiple integer overflows in the Apache Portable Runtime APR library and the Apache Portable Utility library aka APR-util 0.9.x and 1.3.x allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger crafted calls to the 1...

Gentoo Security Advisory GLSA 200909-03 (apr apr-util)

The remote host is missing updates announced in advisory GLSA 200909-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200909-03 (apr apr-util)

The remote host is missing updates announced in advisory GLSA 200909-03. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Portable E.M Magic Morph 1.95b .MOR File Stack Buffer Overflow PoC

Exploit for unknown platform in category local exploits ================================================================== Portable E.M Magic Morph 1.95b .MOR File Stack Buffer Overflow PoC ================================================================== / Portable E.M Magic Morph 1.95b .MOR Fi...

Portable E.M Magic Morph 1.95b - '.MOR' File Stack Buffer Overflow

/ Portable E.M Magic Morph 1.95b .MOR File Stack Buffer Overflow POC By fl0 fl0w "can't stop me/my time is now/your time is up/MY TIME IS NOW !!!!" / The EIP offset is at 312 bytes 0x138 HEX After you compile and create the .MOR file ,edit it with HEX EDITOR and start counting from the start of t...

Portable E.M Magic Morph 1.95b - .MOR File Stack Buffer Overflow

Portable E.M Magic Morph 1.95b - .MOR File Stack Buffer Overflow / Portable E.M Magic Morph 1.95b .MOR File Stack Buffer Overflow POC By fl0 fl0w "can't stop me/my time is now/your time is up/MY TIME IS NOW !!!!" / The EIP offset is at 312 bytes 0x138 HEX After you compile and create the .MOR fil...

GLSA-200909-03 : Apache Portable Runtime, APR Utility Library: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200909-03 Apache Portable Runtime, APR Utility Library: Execution of arbitrary code Matt Lewis reported multiple Integer overflows in the aprrmmmalloc, aprrmmcalloc, and aprrmmrealloc functions in misc/aprrmm.c of APR-Util and in...

Apache Portable Runtime, APR Utility Library: Execution of arbitrary code

Background The Apache Portable Runtime aka APR provides a set of APIs for creating platform-independent applications. The Apache Portable Runtime Utility Library aka APR-Util provides an interface to functionality such as XML parsing, string matching and databases connections. Description Matt...

Altap Salamander 2.5 PE Viewer Buffer Overflow

This module exploits a buffer overflow in Altap Salamander 'Altap Salamander 2.5 PE Viewer Buffer Overflow', 'Description' = %q This module exploits a buffer overflow in Altap Salamander MSFLICENSE, 'Author' = 'aushack' , 'References' = 'CVE', '2007-3314' , 'BID', '24557' , 'OSVDB', '37579' ,...

[SECURITY] Fedora 11 Update: xerces-c27-2.7.0-8.fc11

Xerces-C is a validating XML parser written in a portable subset of C++. Xerces-C makes it easy to give your application the ability to read and wri te XML data. A shared library is provided for parsing, generating, manipulatin g, and validating XML documents. Xerces-C is faithful to the XML 1.0...