Download
| Alert*
|
oval:org.secpod.oval:def:70278
poppler: PDF rendering library Several security issues were fixed in poppler. oval:org.secpod.oval:def:503605 Poppler is a Portable Document Format rendering library, used by applications such as Evince. The evince packages provide a simple multi-page document viewer for Portable Document Format , PostScript , Encapsulated PostScript files, and, with additional back-ends, also the Device Independent File ... oval:org.secpod.oval:def:66760 Poppler is a Portable Document Format rendering library, used by applications such as Evince. Security Fix: * poppler: heap-based buffer over-read in XRef::getEntry in XRef.cc * poppler: heap-based buffer overflow in function ImageStream::getLine in Stream.cc * poppler: heap-based buffer over-rea ... oval:org.secpod.oval:def:89045847 This update for poppler fixes the following issues: - CVE-2017-18267: Fixed an infinite recursion that would allow remote attackers to cause a denial of service . - CVE-2018-13988: Added an improper implementation check which otherwise could allow buffer overflows, memory corruption, and denial of s ... oval:org.secpod.oval:def:1601166 The tiff_document_render and tiff_document_get_thumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files. Poppler before 0.66.0 has an integer over ... oval:org.secpod.oval:def:116959 poppler is a PDF rendering library. oval:org.secpod.oval:def:116954 poppler is a PDF rendering library. oval:org.secpod.oval:def:89046318 This update for poppler fixes the following issues: - CVE-2020-27778: Fixed a buffer overflow in pdftohtml . - CVE-2019-14494: Fixed a divide-by-zero error in pdftoppm . - CVE-2019-9959: Fixed an integer overflow in pdftocairo . - CVE-2019-10871: Fixed an invalid memory access in pdftops . - CVE-201 ... oval:org.secpod.oval:def:503336 Poppler is a Portable Document Format rendering library, used by applications such as Evince. Security Fix: * poppler: heap-based buffer over-read in XRef::getEntry in XRef.cc * poppler: heap-based buffer overflow in function ImageStream::getLine in Stream.cc * poppler: heap-based buffer over-rea ... oval:org.secpod.oval:def:1502651 The advisory is missing the security advisory description. For more information please visit the reference link oval:org.secpod.oval:def:2004756 The JPXStream::init function in Poppler 0.78.0 and earlier doesn"t check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo. oval:org.secpod.oval:def:705774 poppler: PDF rendering library Several security issues were fixed in poppler. oval:org.secpod.oval:def:205483 Poppler is a Portable Document Format rendering library, used by applications such as Evince. The evince packages provide a simple multi-page document viewer for Portable Document Format , PostScript , Encapsulated PostScript files, and, with additional back-ends, also the Device Independent File ... oval:org.secpod.oval:def:59765 The JPXStream::init function in Poppler 0.78.0 and earlier doesn"t check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo.marked the task ... oval:org.secpod.oval:def:2105203 An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc. oval:org.secpod.oval:def:205512 Poppler is a Portable Document Format rendering library, used by applications such as Evince. The evince packages provide a simple multi-page document viewer for Portable Document Format , PostScript , Encapsulated PostScript files, and, with additional back-ends, also the Device Independent File ... oval:org.secpod.oval:def:1700383 An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc. Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.The JPXStream::init function in Poppler 0.78.0 and earlier doesn"t check f ... oval:org.secpod.oval:def:1504313 evince [3.28.2-9] - Handle failure from TIFFReadRGBAImageOriented - Resolves: #1717352 poppler [0.26.5-42] - Fix potential integer overflow and check length for negative values - Resolves: #1757283 [0.26.5-41] - Ignore dict Length if it is broken - Resolves: #1733026 [0.26.5-40] - Fail gracefully if ... |
