PT-2019-11296

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.01.01 Description: An issue was discovered in the function Splash::scaleImageYuXu at Splash.cc for y Bresenham parameters, resulting in a floating-point exception. Recommendations: For Xpdf version 4.01.01, at the moment, there...

poppler/pdf_fuzzer: Use-of-uninitialized-value in Splash::pipeRunSimpleXBGR8

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5105892214177792 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

poppler/pdf_fuzzer: Use-of-uninitialized-value in Splash::fillGlyph2

Detailed report: https://oss-fuzz.com/testcase?key=5830388655063040 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Splash::fillGlyph2...

poppler/pdf_fuzzer: Heap-buffer-overflow in Splash::fillGlyph2

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5133947200602112 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

sporcle.com XSS vulnerability

Open Bug Bounty ID: OBB-454485 Description| Value ---|--- Affected Website:| sporcle.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

CVE-2017-9721

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the boot loader, a buffer overflow can occur while parsing the splash image...

Buffer overflow

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the boot loader, a buffer overflow can occur while parsing the splash image...

CVE-2017-9721

CVE-2017-9721 describes a buffer overflow in the boot loader when parsing the splash image, affecting Android on MSM (and related CAF-based builds) and related Qualcomm components. The entry notes the vulnerability arises in the splash image parsing path in the boot loader, with CVSS details indi...

CVE-2017-9721

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the boot loader, a buffer overflow can occur while parsing the splash image...

PT-2017-19135

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description A buffer overflow issue exists in the boot loader while parsing the splash image,...

CVE-2017-9721: Improper Restriction of Operations within the Bounds of a Memory Buffer

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the boot loader, a buffer overflow can occur while parsing the splash image...

Fedora 25 : poppler (2017-805d9423f8)

Security fix for CVE-2017-14926, CVE-2017-14927 and CVE-2017-14928. ---- Security fix for CVE-2017-14617 ---- Security fix for CVE-2017-14517, CVE-2017-14518, CVE-2017-14519 and CVE-2017-14929. ---- - CVE-2017-14520 Floating point exception in Splash::scaleImageYuXd Note that Tenable Network...

CVE-2017-14520

In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd in Splash.cc, which may lead to a potential attack when handling malicious PDF files...

Unspecified Vulnerability in Poppler Splash.cc File

IPoppler is a PDF file viewer. A security vulnerability exists in the 'Splash::scaleImageYuXd' function of the Splash.cc file in IPoppler version 0.59.0. No details of the vulnerability are provided at this time...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation. In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired function in Splash.cc via a crafted PDF document. Remediation There is no fixed version for poppler. References -...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation. In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd in Splash.cc, which may lead to a potential attack when handling malicious PDF files. Remediation There is no fixed version for...

CVE-2017-14520

In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd in Splash.cc, which may lead to a potential attack when handling malicious PDF files...

DEBIAN-CVE-2017-14520

In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd in Splash.cc, which may lead to a potential attack when handling malicious PDF files...

DEBIAN-CVE-2017-14518

In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired function in Splash.cc via a crafted PDF document...

CVE-2017-14520

Poppler 0.59.0 contains a vulnerability where a floating point exception can occur in Splash::scaleImageYuXd() inside Splash.cc when processing crafted PDFs, potentially enabling an attack via malicious files. Connected advisories from multiple distributions (openSUSE SUSE-2018:648, SUSE-SU-2018:...