Mandrake Linux Security Advisory : tetex (MDKSA-2007:022)

The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, kpdf in KDE before 3.5.5, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, via a PDF file with a 1 craft...

Mandrake Linux Security Advisory : poppler (MDKSA-2007:020)

The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, kpdf in KDE before 3.5.5, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, via a PDF file with a 1 craft...

Mandrake Linux Security Advisory : kdegraphics (MDKSA-2007:024)

The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, kpdf in KDE before 3.5.5, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, via a PDF file with a 1 craft...

Mandrake Linux Security Advisory : koffice (MDKSA-2007:018)

The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, kpdf in KDE before 3.5.5, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, via a PDF file with a 1 craft...

MOAB-06-01-2007: Multiple Vendor PDF Document Catalog Handling Vulnerability

Summary The Adobe Portable Document Format PDF, specification v. 1.3 defines the root of a document's object hierarchy as the "catalog dictionary". The catalog contains the necessary references to objects and data that compose the document contents and their attributes. Also, it contains directiv...

MOAB-06-01-2007: Multiple Vendor PDF Document Catalog Handling Vulnerability

Summary The Adobe Portable Document Format PDF, specification v. 1.3 defines the root of a document's object hierarchy as the "catalog dictionary". The catalog contains the necessary references to objects and data that compose the document contents and their attributes. Also, it contains directiv...

[ MDKSA-2007:019 ] - Updated pdftohtml packages fix crafted pdf file vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:019 http://www.mandriva.com/security/ Package : pdftohtml Date : January 18, 2007 Affected: 2006.0, 2007.0 Problem Description: The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, kpdf in...

[ MDKSA-2007:021 ] - Updated xpdf packages fix crafted pdf file vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:021 http://www.mandriva.com/security/ Package : xpdf Date : January 18, 2007 Affected: 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1...

CVE-2007-0104

The Adobe PDF specification 1.3, as implemented by a xpdf 3.0.1 patch 2, b kpdf in KDE before 3.5.5, c poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, v...

多个PDF阅读器远程缓冲区溢出漏洞

Adobe Portable Document Format是一款流行的PDF文件格式。 多个PDF阅读器处理特殊的PDF文件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 Adobe PDF把文档的对象层次树定义为"目录字典"，目录包含对组成文档内容和属性的目录和数据的必要引用。而且也指示定义怎样渲染文档如怎样显示给用户。 它可以包含不同的关键条目：Type, Pages, PageLabels, Names, Dests, ViewerPreferences, PageLayout, PageMode, Outlines, Threads, OpenAction, UR...

CVE-2007-0104: Improper Input Validation

The Adobe PDF specification 1.3, as implemented by a xpdf 3.0.1 patch 2, b kpdf in KDE before 3.5.5, c poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, v...

CVE-2007-0104

The Adobe PDF specification 1.3, as implemented by a xpdf 3.0.1 patch 2, b kpdf in KDE before 3.5.5, c poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, v...

CVE-2007-0104

The Adobe PDF specification 1.3, as implemented by a xpdf 3.0.1 patch 2, b kpdf in KDE before 3.5.5, c poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, v...

Debian DSA-998-1 : libextractor - several vulnerabilities

Derek Noonburg has fixed several potential vulnerabilities in xpdf, which are also present in libextractor, a library to extract arbitrary meta-data from files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Debian DSA-932-1 : kdegraphics - buffer overflows

'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, that can lead to a denial of service by crashing the application or possibly to the execution of arbitrary code. The same code is present in kpdf which is part of the...

Debian DSA-940-1 : gpdf - buffer overflows

'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, which is also present in gpdf, the GNOME version of the Portable Document Format viewer, and which can lead to a denial of service by crashing the application or possibly...

Debian DSA-950-1 : cupsys - buffer overflows

'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf which are also present in CUPS, the Common UNIX Printing System, and which can lead to a denial of service by crashing the application or possibly to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenabl...

Debian DSA-961-1 : pdfkit.framework - buffer overflows

'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf which are also present in pdfkit.framework, the GNUstep framework for rendering PDF content, and which can lead to a denial of service by crashing the application or possibly to the execution of arbitrary code...

Debian DSA-1019-1 : koffice - several vulnerabilities

Derek Noonburg has fixed several potential vulnerabilities in xpdf, the Portable Document Format PDF suite, which is also present in koffice, the KDE Office Suite. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debia...

Debian DSA-962-1 : pdftohtml - buffer overflows

'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf which are also present in pdftohtml, a utility that translates PDF documents into HTML format, and which can lead to a denial of service by crashing the application or possibly to the execution of arbitrary code...