CVE-2000-0728

CVE-2000-0728 affects the xpdf PDF viewer client prior to 0.91. The issue is a local file overwrite via a symlink attack, enabling a local user to overwrite arbitrary files. The connected documents do not provide explicit exploit details, mitigations, or patched versions beyond this description. ...

CVE-2000-0727

xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters...

CVE-2000-0728

xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack...

CVE-2000-0728: Undefined Security Weakness

xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack...

CVE-2000-0727: Undefined Security Weakness

xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters...

FreeBSD-SA-00:55.xpdf

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:55 Security Advisory FreeBSD, Inc. Topic: xpdf contains multiple vulnerabilities Category: ports Module: xpdf Announced: 2000-10-13 Credits: Unknown Affects: Ports...

[SECURITY] New version of xpdf released

Package : xpdf Problem type : local exploit Debian-specific: no xpdf as distributed in Debian GNU/Linux 2.2 suffered from two problems: 1. creation of temporary files was not done safely which made xpdf vulnerable to a symlink attack. 2. when handling URLs in documents no checking was done for...

[SECURITY] New version of xpdf released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman September 10, 2000 - ------------------------------------------------------------------------ Package : xpdf Problem type : local...

MDKSA-2000:041 - xpdf update

Linux-Mandrake Security Update Advisory Package name: xpdf Date: August 29th, 2000 Advisory ID: MDKSA-2000:041 Affected versions: 6.0, 6.1, 7.0, 7.1 Problem Description: There is a potential race condation when using tmpnam and fopen in xpdf versions prior to 0.91. This exploit can be only used a...

Дырка в xpdf

Некорректная работа с временными файлами позволяют атаку через символьные линки?...

PT-2009-6643 · Debian +2 · Xpdf-Utils +15

Name of the Vulnerable Software and Affected Versions: kdegraphics-dev affected versions not specified kdegraphics-dbg affected versions not specified kdegraphics-doc-html affected versions not specified kdvi affected versions not specified kdegraphics affected versions not specified...

PT-2009-6639 · Foxtrot Systems +4 · Xpdf +5

Name of the Vulnerable Software and Affected Versions: cups-devel-1.1.22 versions 1.1.22 cups-libs-1.1.22 versions 1.1.22 cups-1.1.22 versions 1.1.22 libkscan-dev versions affected versions not specified kdegraphics-dev versions affected versions not specified xpdf-common versions affected versio...

PT-2009-6642 · Kde +3 · Libkscan1 +11

Name of the Vulnerable Software and Affected Versions: kdegraphics versions prior to 3.02pl4 Xpdf versions 2.x and 3.x before 3.02pl4 Poppler version 0.x libkscan-dev affected versions not specified kdegraphics-dev affected versions not specified xpdf-common affected versions not specified...