FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The last vuln.xml file processed by FreshPorts is:

Revision:  318877
Date:      2013-05-23
Time:      15:30:07Z
Committer: flo

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
8581189c-bd5f-11de-8709-0017a4cccfc6	Xpdf -- Multiple Vulnerabilities SecurityFocus reports: Some vulnerabilities have been reported in Xpdf, which can be exploited by malicious people to potentially compromise a user's system. 1) Multiple integer overflows in "SplashBitmap::SplashBitmap()" can be exploited to cause heap-based buffer overflows. 2) An integer overflow error in "ObjectStream::ObjectStream()" can be exploited to cause a heap-based buffer overflow. 3) Multiple integer overflows in "Splash::drawImage()" can be exploited to cause heap-based buffer overflows. 4) An integer overflow error in "PSOutputDev::doImageL1Sep()" can be exploited to cause a heap-based buffer overflow when converting a PDF document to a PS file. Successful exploitation of the vulnerabilities may allow execution of arbitrary code by tricking a user into opening a specially crafted PDF file. Discovery 2009-10-14 Entry 2009-10-20 xpdf lt 3.02_11 http://www.securityfocus.com/archive/1/507261 http://secunia.com/advisories/37053/
a21037d5-2c38-11de-ab3b-0017a4cccfc6	xpdf -- multiple vulnerabilities Secunia reports: Some vulnerabilities have been reported in Xpdf, which can be exploited by malicious people to potentially compromise a user's system. A boundary error exists when decoding JBIG2 symbol dictionary segments. This can be exploited to cause a heap-based buffer overflow and potentially execute arbitrary code. Multiple integer overflows in the JBIG2 decoder can be exploited to potentially execute arbitrary code. Multiple boundary errors in the JBIG2 decoder can be exploited to cause buffer overflows and potentially execute arbitrary code. Multiple errors in the JBIG2 decoder can be exploited can be exploited to free arbitrary memory and potentially execute arbitrary code. Multiple unspecified input validation errors in the JBIG2 decoder can be exploited to potentially execute arbitrary code. Discovery 2009-04-16 Entry 2009-04-18 Modified 2009-04-18 xpdf lt 3.02_11 CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 http://secunia.com/advisories/34291 http://www.vupen.com/english/advisories/2009/1065
8581189c-bd5f-11de-8709-0017a4cccfc6	Xpdf -- Multiple Vulnerabilities SecurityFocus reports: Some vulnerabilities have been reported in Xpdf, which can be exploited by malicious people to potentially compromise a user's system. 1) Multiple integer overflows in "SplashBitmap::SplashBitmap()" can be exploited to cause heap-based buffer overflows. 2) An integer overflow error in "ObjectStream::ObjectStream()" can be exploited to cause a heap-based buffer overflow. 3) Multiple integer overflows in "Splash::drawImage()" can be exploited to cause heap-based buffer overflows. 4) An integer overflow error in "PSOutputDev::doImageL1Sep()" can be exploited to cause a heap-based buffer overflow when converting a PDF document to a PS file. Successful exploitation of the vulnerabilities may allow execution of arbitrary code by tricking a user into opening a specially crafted PDF file. Discovery 2009-10-14 Entry 2009-10-20 xpdf lt 3.02_11 http://www.securityfocus.com/archive/1/507261 http://secunia.com/advisories/37053/
a21037d5-2c38-11de-ab3b-0017a4cccfc6	xpdf -- multiple vulnerabilities Secunia reports: Some vulnerabilities have been reported in Xpdf, which can be exploited by malicious people to potentially compromise a user's system. A boundary error exists when decoding JBIG2 symbol dictionary segments. This can be exploited to cause a heap-based buffer overflow and potentially execute arbitrary code. Multiple integer overflows in the JBIG2 decoder can be exploited to potentially execute arbitrary code. Multiple boundary errors in the JBIG2 decoder can be exploited to cause buffer overflows and potentially execute arbitrary code. Multiple errors in the JBIG2 decoder can be exploited can be exploited to free arbitrary memory and potentially execute arbitrary code. Multiple unspecified input validation errors in the JBIG2 decoder can be exploited to potentially execute arbitrary code. Discovery 2009-04-16 Entry 2009-04-18 Modified 2009-04-18 xpdf lt 3.02_11 CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 http://secunia.com/advisories/34291 http://www.vupen.com/english/advisories/2009/1065