Mageia: Security Advisory (MGASA-2015-0465)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-3411-1 : cups-filters - security update

Michal Kowalczyk discovered that missing input sanitising in the foomatic-rip print filter might result in the execution of arbitrary commands. The oldstable distribution wheezy is not affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

[SECURITY] [DSA 3411-1] cups-filters security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3411-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 02, 2015 https://www.debian.org/security/faq -...

CVE-2015-8327

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via backtick characters in a print job...

UBUNTU-CVE-2015-8327

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via backtick characters in a print job...

cups-filters: texttopdf heap-based buffer overflow

A heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filter processed print jobs with a specially crafted line size. An attacker able to submit print jobs could use this flaw to crash texttopdf or, possibly, execute arbitrary code with the privileges of the "lp" us...

cups-filters: texttopdf integer overflow

An integer overflow flaw, leading to a heap-based buffer overflow, was discovered in the way the texttopdf utility of cups-filter processed print jobs with a specially crafted line size. An attacker able to submit print jobs could use this flaw to crash texttopdf or, possibly, execute arbitrary...

CVE-2015-5583

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to bypass intended sandbox restrictions and obtain sensitive PD...

CVE-2015-5583

This CVE (CVE-2015-5583) affects Adobe Reader and Acrobat when running on Windows or OS X, with vulnerable versions including Adobe Reader/Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat/Reader DC Classic before 2015.006.30094, and Acrobat/Reader DC Continuous before 2015.009.20069. ...

CVE-2015-5583: Exposure of Sensitive Information to an Unauthorized Actor

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to bypass intended sandbox restrictions and obtain sensitive PD...

KLA10682 Multiple vulnerabilities in Adobe Acrobat and Reader

Multiple serious vulnerabilities have been found in Adobe Acrobat and Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. An unknown vulnerability can be exploited via specially designe...

PT-2015-2333

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions affected versions not specified Adobe Reader versions affected versions not specified Adobe Flash Player versions affected versions not specified Adobe Integrated Runtime versions affected versions not specified Adobe...

Open-Xchange Server and Open-Xchange AppSuite Front End Cross-Site Scripting Vulnerabilities

Open-Xchange Server is a semi-open source project mainly used for developing collaboration software; OX AppSuite is a set of Web cloud desktop environment. A cross-site scripting vulnerability exists in the dialogs for printing content in the Front End of Open-Xchange Server and OX AppSuite, whic...

PDF And Print <= 1.7.4 - Cross-Site Scripting (XSS)

The PDF & Print by BestWebSoft WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress PDF And Print Plugin <= 1.7.4 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Vulnerable parameter is "bwslicensekey". Solution Upgrade this plugin...

Debian DLA-314-1 : cups security update

Petr Sklenar of Red Hat discovered that the texttopdf tool, part of cups filters, was susceptible to multiple heap-based buffer and integer overflows due to improper handling of print jobs. This could allow remote attackers to crash texttopdf or possibly execute arbitrary code. For Debian 6...

[SECURITY] [DLA 314-1] cups security update

Package : cups Version : 1.4.4-7+squeeze10 CVE ID : CVE-2015-3258 CVE-2015-3279 Petr Sklenar of Red Hat discovered that the texttopdf tool, part of cups filters, was susceptible to multiple heap-based buffer and integer overflows due to improper handling of print jobs. This could allow remote...

DLA-314-1 cups - security update

Bulletin has no description...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the PrintWebViewHelper class in the components/printing/renderer/printwebviewhelper.cc module of the Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service failures by triggering embedded...

UBUNTU-CVE-2015-1295

Multiple use-after-free vulnerabilities in the PrintWebViewHelper class in components/printing/renderer/printwebviewhelper.cc in Google Chrome before 45.0.2454.85 allow user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact by triggering nested IPC...