44 matches found
[SECURITY] Fedora 37 Update: ghostscript-9.56.1-8.fc37
This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...
SUSE CVE-2012-5656
The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity XXE injection attack...
ALPINE-CVE-2022-44638
In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an integer overflow in pixmansamplefloory...
[SECURITY] Fedora 34 Update: ghostscript-9.54.0-2.1.fc34
This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...
Platform update for Windows 7 SP1 and Windows Server 2008 R2 SP1
Platform update for Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This article describes a platform update for Windows 7 Service Pack 1 SP1 and Windows Server 2008 R2 SP1. This update improves the range and performance of the following graphics and imaging components: Direct2D DirectWrite...
[SECURITY] Fedora 31 Update: ghostscript-9.27-1.fc31
This package provides useful conversion utilities based on Ghostscript soft ware, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Syste ms' PostScript PS and Portable Document Format PDF page description...
[SECURITY] Fedora 28 Update: ghostscript-9.26-3.fc28
This package provides useful conversion utilities based on Ghostscript soft ware, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Syste ms' PostScript PS and Portable Document Format PDF page description...
[SECURITY] Fedora 28 Update: ghostscript-9.26-1.fc28
This package provides useful conversion utilities based on Ghostscript soft ware, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Syste ms' PostScript PS and Portable Document Format PDF page description...
[SECURITY] Fedora 28 Update: ghostscript-9.23-6.fc28
This package provides useful conversion utilities based on Ghostscript soft ware, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Syste ms' PostScript PS and Portable Document Format PDF page description...
Skia: Heap buffer overflow rasterizing paths in SVG
A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...
Debian DLA-1126-1 : libxfont security update
It was discovered that there two vulnerabilities the library providing font selection and rasterisation, libxfont : - CVE-2017-13720: If a pattern contained a '?' character any character in the string is skipped even if it was a '\0'. The rest of the matching then read invalid memory. -...
Iceni Argus PDF TextToPolys Rasterization Code Execution Vulnerability(CVE-2016-8389)
Summary An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will attempt to convert each character from a font into a polygon and then attempt to rasterize these shapes. When rasterizing these shapes, the tool will perfor...
Stable Channel Update for Chrome OS
The Stable channel has been updated to 60.0.3112.80 Platform version: 9592.71.0 for most Chrome OS devices . This build contains a number of bug fixes, security updates and feature enhancements. Systems will be receiving updates over the next several days. Some highlights of these changes are:...
Iceni Argus PDF TextToPolys Rasterization Code Execution Vulnerability
Summary An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will attempt to convert each character from a font into a polygon and then attempt to rasterize these shapes. When rasterizing these shapes, the tool will perfor...
CVE-2012-5656
The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity XXE injection attack...
DEBIAN-CVE-2012-5656
The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity XXE injection attack...
CVE-2012-5656
The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity XXE injection attack...
CVE-2012-5656
CVE-2012-5656 concerns Inkscape ≤ 0.48.3 (up to 0.48.4) where the rasterization of SVGs can be abused via an XML external entity (XXE) in a crafted SVG, allowing a local attacker to read arbitrary files. The issue stems from the rasterization path processing external entities. Public advisories c...
