PDF JBIG2 MMR infinite loop DoS

The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service infinite loop and hang via a crafted PDF file...

Symantec Fax Viewer Control ActiveX Control AppendFax Overflow

The version of the Symantec Fax Viewer Control ActiveX control, a component included with Symantec Winfax Pro and installed on the remote Windows host, reportedly contains a stack-based buffer overflow that can be triggered by calling the 'AppendFax' method with an overly long argument. If an...

Symantec WinFax Pro 'DCCFAXVW.DLL'堆缓冲区溢出漏洞

Symantec WinFax Pro是一款传真管理软件。 Symantec WinFax Pro包含的ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题包含在DCCFAXVW.DLL提供的控件中，由于对AppendFax方法缺少正确边界检查，构建恶意WEB页，诱使用户打开，可导致以应用程序权限执行任意指令。 Symantec WinFax Pro 10.03 目前没有解决方案提供： http://www.symantec.com/ !-- Symantec Fax Viewer Control v10 DCCFAXVW.DLL remote...

Symantec Fax Viewer Control 10 (DCCFAXVW.DLL) Remote BOF Exploit

No description provided by source. !-- Symantec Fax Viewer Control v10 DCCFAXVW.DLL remote buffer overflow exploit IE7 by Nine:Situations:Group::trotzkista site: http://retrogod.altervista.org/ tested against: Symantec WinFax Pro 10.03 Internet Explorer 7, XP SP3 some details: CLSID:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus SAV before 10.1 MR8, Symantec Endpoint Protection SEP 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject...

CVE-2009-1428

Multiple cross-site scripting XSS vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus SAV before 10.1 MR8, Symantec Endpoint Protection SEP 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject...

CVE-2009-1428

Multiple cross-site scripting XSS vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus SAV before 10.1 MR8, Symantec Endpoint Protection SEP 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject...

Symantec Fax Viewer Control 10 (DCCFAXVW.DLL) Remote BOF Exploit

Exploit for windows platform in category remote exploits ================================================================ Symantec Fax Viewer Control 10 DCCFAXVW.DLL Remote BOF Exploit ================================================================ // win32exec - EXITFUNC=seh...

Symantec Fax Viewer Control 10 - 'DCCFAXVW.dll' Remote Buffer Overflow

// win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var scode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" + "%u3058%u3142%u4250%u6b41%u4142%u4253%u4232%u3241" +...

Symantec Fax Viewer Control 10 - DCCFAXVW.dll Remote Buffer Overflow

Symantec Fax Viewer Control 10 - DCCFAXVW.dll Remote Buffer Overflow // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var scode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436...

Symantec WinFax Pro 10.03 Buffer Overflow

// win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var scode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" + "%u3058%u3142%u4250%u6b41%u4142%u4253%u4232%u3241" +...

Symantec Log Viewer JavaScript Injection Vulnerabilities

SUMMARY The Log Viewer feature in some Symantec products contains two parsing errors which could be exploited through Java script injection. AFFECTED PRODUCTS Product | Version | Solution ---|---|--- Norton 360 | 1.0 | Run LiveUpdate in Interactive Mode Norton Internet Security | 2005 through 200...

DEBIAN-CVE-2009-0800

Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file...

FreeBSD : imp3 -- XSS hole in the HTML viewer (efc4819b-0b2d-11d9-bfe1-000bdb1444a4)

The script vulnerabilities can only be exposed with certain browsers and allow XSS attacks when viewing HTML messages with the HTML MIME viewer %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML databas...

Xpdf JBIG2处理多个缓冲区溢出和拒绝服务漏洞

BUGTRAQ ID: 34568 CVECAN ID: CVE-2009-0146,CVE-2009-0147,CVE-2009-0166,CVE-2009-0799,CVE-2009-0800,CVE-2009-1179,CVE-2009-1180,CVE-2009-1181,CVE-2009-1182,CVE-2009-1183,CVE-2009-1187,CVE-2009-1188 Xpdf是便携文档格式（PDF）文件的开放源码查看器。...

[SECURITY] Fedora 10 Update: argyllcms-1.0.3-5.fc10

The Argyll color management system supports accurate ICC profile creation f or scanners, CMYK printers, film recorders and calibration and profiling of displays. Spectral sample data is supported, allowing a selection of illuminants obse rver types, and paper fluorescent whitener additive...

[SECURITY] Fedora 9 Update: argyllcms-1.0.3-5.fc9

The Argyll color management system supports accurate ICC profile creation f or scanners, CMYK printers, film recorders and calibration and profiling of displays. Spectral sample data is supported, allowing a selection of illuminants obse rver types, and paper fluorescent whitener additive...

PDF JBIG2 MMR decoder buffer overflows

Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file...

PDF JBIG2 decoder OOB read

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service crash via a crafted PDF file that triggers an out-of-bounds read...

PDF JBIG2 NULL dereference

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service crash via a crafted PDF file that triggers a NULL pointer dereference...