Vulnerability & Exploit Database

Displaying entries 1 - 10 of 21 in total

Results for: CVE-2009-3608 Back to search

SUSE Linux Security Advisory: SUSE-SR:2009:019 Vulnerability

  • Severity: 9
  • Published: October 30, 2009

Opera before 10.01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted domain name.

USN-850-3: poppler vulnerabilities Vulnerability

  • Severity: 9
  • Published: October 21, 2009

Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.

USN-850-1: poppler vulnerabilities Vulnerability

  • Severity: 9
  • Published: October 21, 2009

Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.

SUSE Linux Security Advisory: SUSE-SR:2009:018 Vulnerability

  • Severity: 9
  • Published: October 21, 2009

Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.

SUSE Linux Security Vulnerability: CVE-2009-3608 Vulnerability

  • Severity: 9
  • Published: October 21, 2009

Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.

RHSA-2010:0400: tetex security update Vulnerability

  • Severity: 9
  • Published: October 21, 2009

teTeX is an implementation of TeX. TeX takes a text file and a set offormatting commands as input, and creates a typesetter-independent DeViceIndependent (DVI) file as output.Multiple integer overflow flaws were found in the way teTeX processedspecial commands when converting DVI files into PostScript. An attackercould create a malicious...

RHSA-2009:1513: cups security update Vulnerability

  • Severity: 9
  • Published: October 21, 2009

The Common UNIX Printing System (CUPS) provides a portable printing layerfor UNIX operating systems. The CUPS "pdftops" filter converts PortableDocument Format (PDF) files to PostScript.Two integer overflow flaws were found in the CUPS "pdftops" filter. Anattacker could create a malicious PDF file that would cause "pdftops" tocrash or, p...

RHSA-2009:1512: kdegraphics security update Vulnerability

  • Severity: 9
  • Published: October 21, 2009

The kdegraphics packages contain applications for the K DesktopEnvironment, including KPDF, a viewer for Portable Document Format (PDF)files.Multiple integer overflow flaws were found in KPDF. An attacker couldcreate a malicious PDF file that would cause KPDF to crash or, potentially,execute arbitrary code when opened. (CVE-2009-0791, CV...

RHSA-2009:1504: poppler security and bug fix update Vulnerability

  • Severity: 9
  • Published: October 21, 2009

Poppler is a Portable Document Format (PDF) rendering library, used byapplications such as Evince.Multiple integer overflow flaws were found in poppler. An attacker couldcreate a malicious PDF file that would cause applications that use poppler(such as Evince) to crash or, potentially, execute arbitrary code whenopened. (CVE-2009-3603, C...

RHSA-2009:1503: gpdf security update Vulnerability

  • Severity: 9
  • Published: October 21, 2009

GPdf is a viewer for Portable Document Format (PDF) files.Multiple integer overflow flaws were found in GPdf. An attacker couldcreate a malicious PDF file that would cause GPdf to crash or, potentially,execute arbitrary code when opened. (CVE-2009-0791, CVE-2009-1188,CVE-2009-3604, CVE-2009-3608, CVE-2009-3609)Red Hat would like to thank...