Oracle Linux 8 : poppler (ELSA-2019-2713)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2713 advisory. 0.66.0-11.el80.12 - Ignore dict Length if it is broken - Resolves: 1741146 0.66.0-11.el80.11 - Check whether input is RGB in PSOutputDev::checkPageSlic...

poppler: stack consumption in function Dict::find() in Dict.cc

PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find located at Dict.cc, which can for example be triggered by passing a crafted pdf file to the pdfunite binary...

Updated poppler packages fix security vulnerabilities

Updated poppler packages fix security vulnerabilities Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsamplerowboxfilter function. CVE-2019-9631 PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function...

MGASA-2019-0244 Updated poppler packages fix security vulnerabilities

Updated poppler packages fix security vulnerabilities Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsamplerowboxfilter function. CVE-2019-9631 PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function...

Uncontrolled Resource Consumption in MetadataExtractor

MetadataExtractor 2.1.0 allows stack consumption...

Poppler 0.74 Multiple Vulnerabilities

The version of Poppler installed on the remote host is 0.74. It is, therefore, affected by multiple vulnerabilities: - An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file ...

CVE-2019-14262

MetadataExtractor 2.1.0 allows stack consumption...

CVE-2019-14262

MetadataExtractor 2.1.0 allows stack consumption...

Stack overflow

MetadataExtractor 2.1.0 allows stack consumption...

CVE-2019-14262

MetadataExtractor 2.1.0 allows stack consumption...

CVE-2019-14262

CVE-2019-14262 concerns MetadataExtractor 2.1.0, vulnerable to a stack-based buffer overflow caused by improper bounds checking. A crafted input (e.g., a specially crafted file) could overflow a stack and allow remote code execution on the target system. The related advisories cite a high impact ...

CVE-2019-14262

MetadataExtractor 2.1.0 allows stack consumption...

MetadataExtractor Stack Overflow Vulnerability

MetadataExtractor is a .NET library for extracting metadata such as Exif, IPT, XMP and ICC from image and video files. A security vulnerability exists in MetadataExtractor version 2.1.0. An attacker can exploit this vulnerability to cause a denial of service stack consumption...

PT-2019-13570

Name of the Vulnerable Software and Affected Versions MetadataExtractor version 2.1.0 Description The issue allows stack consumption. Recommendations For MetadataExtractor version 2.1.0, at the moment, there is no information about a newer version that contains a fix for this issue...

CVE-2019-14262: Uncontrolled Resource Consumption

MetadataExtractor 2.1.0 allows stack consumption...

CVE-2019-13129

On the Motorola router CX2L MWR04L 1.01, there is a stack consumption infinite recursion issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length handling...

CVE-2019-13129

On the Motorola router CX2L MWR04L 1.01, there is a stack consumption infinite recursion issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length handling...

Design/Logic Flaw

On the Motorola router CX2L MWR04L 1.01, there is a stack consumption infinite recursion issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length handling...

CVE-2019-13129

On the Motorola router CX2L MWR04L 1.01, there is a stack consumption infinite recursion issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length handling...

CVE-2019-13129

Summary: CVE-2019-13129 affects the Motorola CX2L MWR04L router (version 1.01). The issue is a stack consumption/infinite recursion in the scopd process reachable over TCP port 8010 and UDP port 8080, caused by improper length handling in snprintf. This can lead to denial of service through resou...