237 matches found
Fedora 7 : tetex-3.0-40.3.fc7 (2007-3390)
fix t1lib flaw CVE-2007-4033 352271 - fix CVE-2007-4352 CVE-2007-5392 CVE-2007-5393, various xpdf flaws 345121 - xdvi won't segfault if DVI file contains character which is not present in font 243630 - fix dvips -z buffer overflow with long href CVE-2007-5935 368591 - fix insecure usage of...
CSTeX: Multiple vulnerabilities
Background CSTeX is a TeX distribution with Czech and Slovak support. It is used for creating and manipulating LaTeX documents. Description Multiple issues were found in the teTeX 2 codebase that CSTeX builds upon GLSA 200709-17, GLSA 200711-26. CSTeX also includes vulnerable code from the GD...
GLSA-200711-26 : teTeX: Multiple vulnerabilities
"The remote host is affected by the vulnerability described in GLSA-200711-26 teTeX: Multiple vulnerabilities Joachim Schrod discovered several buffer overflow vulnerabilities and an insecure temporary file creation in the 'dvilj' application that is used by dvips to convert DVI files to printer...
teTeX: Multiple vulnerabilities
Background teTeX is a complete TeX distribution for editing documents. Description Joachim Schrod discovered several buffer overflow vulnerabilities and an insecure temporary file creation in the "dvilj" application that is used by dvips to convert DVI files to printer formats CVE-2007-5937,...
Ubuntu 6.06 LTS / 6.10 / 7.04 : t1lib vulnerability (USN-515-1)
It was discovered that t1lib does not properly perform bounds checking which can result in a buffer overflow vulnerability. An attacker could send specially crafted input to applications linked against t1lib which could result in a DoS or arbitrary code execution. Note that Tenable Network Securi...
xpdf security update
CentOS Errata and Security Advisory CESA-2007:1031-01 Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based...
RHEL 4 / 5 : tetex (RHSA-2007:1027)
Updated tetex packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX takes a text file and a set of formatting...
Important: Red Hat Security Advisory: tetex security update
Updated tetex packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX takes a text file and a set of formatting...
t1lib font filename string overflow
Buffer overflow in the intT1EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in phpgd2.dll in the gd PHPGD2...
RHEL 2.1 : xpdf (RHSA-2007:1031)
Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based viewer for Portable Document Format PDF files. Alin Rad...
RHEL 3 : xpdf (RHSA-2007:1030)
Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based viewer for Portable Document Format PDF files. Alin Rad P...
t1lib font filename string overflow
Buffer overflow in the intT1EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in phpgd2.dll in the gd PHPGD2...
Important: Red Hat Security Advisory: xpdf security update
Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based viewer for Portable Document Format PDF files. Alin Rad P...
t1lib font filename string overflow
Buffer overflow in the intT1EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in phpgd2.dll in the gd PHPGD2...
Fedora 7 : t1lib-5.1.1-3.fc7 (2007-2343)
This is most likely not exploitable on Fedora, due to FORTIFYSOURCE protection, as the overflow is strcat call which is protected. This update has a patch that avoids the call where the overflow would occur. Note that Tenable Network Security has extracted the preceding description block directly...
openSUSE 10 Security Update : t1lib (t1lib-4592)
A buffer overflow in t1lib could potentially be exploited to execute arbitrary code via specially crafted files CVE-2007-4033. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update t1lib-4592. The...
Debian DSA-1390-1 : t1lib - buffer overflow
Hamid Ebadi discovered a buffer overflow in the intT1EnvGetCompletePath routine in t1lib, a Type 1 font rasterizer library. This flaw could allow an attacker to crash an application using the t1lib shared libraries, and potentially execute arbitrary code within such an application's security...
[SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1390-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 18, 2007 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1390-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 18, 2007 http://www.debian.org/security/faq -...
