Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2008-1693
Description:The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, related to dereferencing a function pointer associated with the type of this font object.
Test IDs: 1.3.6.1.4.1.25623.1.0.60831   1.3.6.1.4.1.25623.1.0.65811   1.3.6.1.4.1.25623.1.0.65997   1.3.6.1.4.1.25623.1.0.62032   1.3.6.1.4.1.25623.1.0.60907   1.3.6.1.4.1.25623.1.0.60751   1.3.6.1.4.1.25623.1.0.60747   1.3.6.1.4.1.25623.1.0.60832   1.3.6.1.4.1.25623.1.0.61628   1.3.6.1.4.1.25623.1.0.62038   1.3.6.1.4.1.25623.1.0.62033   1.3.6.1.4.1.25623.1.0.60748   1.3.6.1.4.1.25623.1.0.60818   1.3.6.1.4.1.25623.1.0.60899   1.3.6.1.4.1.25623.1.0.65443   1.3.6.1.4.1.25623.1.0.60746   1.3.6.1.4.1.25623.1.0.61626   1.3.6.1.4.1.25623.1.0.62149   1.3.6.1.4.1.25623.1.0.61416   1.3.6.1.4.1.25623.1.0.60795   1.3.6.1.4.1.25623.1.0.122594  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2008-1693
BugTraq ID: 28830
http://www.securityfocus.com/bid/28830
Debian Security Information: DSA-1548 (Google Search)
http://www.debian.org/security/2008/dsa-1548
Debian Security Information: DSA-1606 (Google Search)
http://www.debian.org/security/2008/dsa-1606
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00522.html
http://security.gentoo.org/glsa/glsa-200804-18.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2008:089
http://www.mandriva.com/security/advisories?name=MDVSA-2008:173
http://www.mandriva.com/security/advisories?name=MDVSA-2008:197
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11226
RedHat Security Advisories: RHSA-2008:0238
http://www.redhat.com/support/errata/RHSA-2008-0238.html
RedHat Security Advisories: RHSA-2008:0239
http://www.redhat.com/support/errata/RHSA-2008-0239.html
RedHat Security Advisories: RHSA-2008:0240
http://www.redhat.com/support/errata/RHSA-2008-0240.html
RedHat Security Advisories: RHSA-2008:0262
http://www.redhat.com/support/errata/RHSA-2008-0262.html
http://securitytracker.com/id?1019893
http://secunia.com/advisories/29816
http://secunia.com/advisories/29834
http://secunia.com/advisories/29836
http://secunia.com/advisories/29851
http://secunia.com/advisories/29853
http://secunia.com/advisories/29868
http://secunia.com/advisories/29869
http://secunia.com/advisories/29884
http://secunia.com/advisories/29885
http://secunia.com/advisories/30019
http://secunia.com/advisories/30033
http://secunia.com/advisories/30717
http://secunia.com/advisories/31035
SuSE Security Announcement: SUSE-SR:2008:011 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html
SuSE Security Announcement: SUSE-SR:2008:013 (Google Search)
http://www.novell.com/linux/security/advisories/2008_13_sr.html
http://www.ubuntu.com/usn/usn-603-1
http://www.ubuntu.com/usn/usn-603-2
http://www.vupen.com/english/advisories/2008/1265/references
http://www.vupen.com/english/advisories/2008/1266/references
XForce ISS Database: xpdf-pdf-code-execution(41884)
https://exchange.xforce.ibmcloud.com/vulnerabilities/41884




© 1998-2021 E-Soft Inc. All rights reserved.