Red Hat Security AdvisoryRHSA-2006:0160
tetex security update
Released 2006-01-19 · Red Hat rating Moderate · View on Red Hat →
Fixes 8 records
Priority MEDIUM 49
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated usi…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03823 · Published 2006-01-06 · Fixed CWE-399
Priority MEDIUM 42
Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remot…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0614 · Published 2005-12-08 · Fixed CWE-119
Priority MEDIUM 41
Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with (1)…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05521 · Published 2006-01-06 · Fixed CWE-119
Priority MEDIUM 40
Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04296 · Published 2006-01-23 · Fixed
Priority LOW 30
Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.04082 · Published 2005-12-07 · Fixed CWE-119
Priority LOW 30
Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.04082 · Published 2005-12-07 · Fixed CWE-119
Priority LOW 29
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null derefer…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03382 · Published 2006-01-06 · Fixed CWE-399
Priority LOW 27
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDe…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02301 · Published 2006-01-06 · Fixed CWE-189