iDEFENSE Security Advisory 01.18.05 - Multiple Unix/Linux Vendor Xpdf makeFileKey2 Stack Overflow

Multiple Unix/Linux Vendor Xpdf makeFileKey2 Stack Overflow iDEFENSE Security Advisory 01.18.05 www.idefense.com/application/poi/display?id=186&type=vulnerabilities January 18, 2005 I. BACKGROUND Xpdf is an open-source viewer for PDF files. More information is available at the following site:...

RHEL 3 : xpdf (RHSA-2005:018)

Updated Xpdf packages that fix several security issues are now available. Xpdf is an X Window System based viewer for Portable Document Format PDF files. A buffer overflow flaw was found in the Gfx::doImage function of Xpdf. An attacker could construct a carefully crafted PDF file that could caus...

Moderate: Red Hat Security Advisory: xpdf security update

Updated Xpdf packages that fix several security issues are now available. Xpdf is an X Window System based viewer for Portable Document Format PDF files. A buffer overflow flaw was found in the Gfx::doImage function of Xpdf. An attacker could construct a carefully crafted PDF file that could caus...

Mandrake Linux Security Advisory : koffice (MDKSA-2004:165)

Chris Evans discovered numerous vulnerabilities in the xpdf package, which also effect software using embedded xpdf code, such as koffice CVE-2004-0888. Multiple integer overflow issues affecting xpdf-2.0 and xpdf-3.0. Also programs like koffice which have embedded versions of xpdf. These can...

Debian DSA-619-1 : xpdf - buffer overflow

An iDEFENSE security researcher discovered a buffer overflow in xpdf, the portable document format PDF suite. A maliciously crafted PDF file could exploit this problem, resulting in the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

DSA-619-1 xpdf - buffer overflow

Bulletin has no description...

GLSA-200412-24 : Xpdf, GPdf: New integer overflows

The remote host is affected by the vulnerability described in GLSA-200412-24 Xpdf, GPdf: New integer overflows A new integer overflow issue was discovered in Xpdf's Gfx::doImage function. Impact : An attacker could entice an user to open a specially crafted PDF file, potentially resulting in...

Fedora Core 3 : xpdf-3.00-10.1 (2004-573)

This package fixes a buffer overflow which allows attackers to cause the xpdf application to crash, and possibly to execute arbitrary code. The Common Vulnerabilities and Exposures projects cve.mitre.org has assigned the name CVE-2004-1125 to this issue. Note that Tenable Network Security has...

[SECURITY] [DSA 581-1] New xpdf packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 581-1 [email protected] http://www.debian.org/security/ Martin Schulze November 2nd, 2004 http://www.debian.org/security/faq -...

Important: Red Hat Security Advisory: xpdf security update

An updated xpdf package that fixes a number of integer overflow security flaws is now available. Xpdf is an X Window System based viewer for Portable Document Format PDF files. During a source code audit, Chris Evans and others discovered a number of integer overflow bugs that affected all versio...

Important: Red Hat Security Advisory: : : : Updated Xpdf packages fix security vulnerability

Updated Xpdf packages are available that fix a vulnerability where a malicious PDF document could run arbitrary code. Xpdf is an X Window System based viewer for Portable Document Format PDF files. During an audit of CUPS, a printing system, Zen Parsec found an integer overflow vulnerability in t...

Important: Red Hat Security Advisory: xpdf security update

Updated Xpdf packages are available that fix a vulnerability where a malicious PDF document could run arbitrary code. Updated 21 July 2003 Updated packages are now available, as the original errata packages did not fix all possible ways of exploiting this vulnerability. Xpdf is an X Window System...

Important: Red Hat Security Advisory: : : : Updated Xpdf packages fix security vulnerability

Updated Xpdf packages are now available that fix a vulnerability in which a maliciously-crafted pdf document could run arbitrary code. Updated 16 April 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. Xpdf is a viewer for Portable Document Format PDF files. During an audi...

Important: Red Hat Security Advisory: xpdf security update

Updated Xpdf packages are available to fix a vulnerability where a malicious PDF document could run arbitrary code. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 Xpdf is an X Window System based viewer for Portable Document Format PDF files. During an audit of CUPS, a...

CVE-2000-0727

CVE-2000-0727 affects the xpdf PDF viewer client older than 0.91. The flaw: when handling embedded URLs, the client does not correctly launch a web browser, enabling an attacker to execute arbitrary commands via a URL containing shell metacharacters. NVD assigns a base CVSS v2.0 score of 7.6 (HIG...