S-342: Popper Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-342: Popper Vulnerability
# 1  
Old 07-29-2008
S-342: Popper Vulnerability

It was discovered that poppler, a PDF rendering library, did not properly handle embedded fonts in PDF files, allowing attackers to execute arbitrary code via a crafted font object. The risk is MEDIUM.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

5 More Discussions You Might Find Interesting

1. IP Networking

Common Vulnerability

Hi there, I am trying to find info about the commonly used ports and how it can be vulnerable and to identify them? For example, I would like to identify how to man-in-the-middle using these ports 21(FTP),22(SSH),23(TELNET), (1 Reply)
Discussion started by: alvinoo
1 Replies

2. AIX

Can't mount showing 0506-342 The superblock on /dev/fslv00 is dirty

Dear All Last day in Aix 5.2 server by executing # df –g I found following: Filesystem GB blocks Free %Used Iused %Iused Mounted on . . /dev/fslv00 58.00 136.70 -135% 212103 1% /sprod After shutting down by following command # shutdown –h And when... (1 Reply)
Discussion started by: xa52000
1 Replies

3. UNIX for Dummies Questions & Answers

Vulnerability Alerts

Aside from CERT, are there any additional sources for unix/linux vulnerabilities? (1 Reply)
Discussion started by: kmgrady01
1 Replies

4. Cybersecurity

SNMP Vulnerability

SNMP Vulnerability: In a few minutes wire services and other news sources will begin breaking a story about widespread vulnerabilities in SNMP (Simple Network Management Protocol). Exploits of the vulnerability cause systems to fail or to be taken over. The vulnerability can be found in... (1 Reply)
Discussion started by: dpatel
1 Replies

5. UNIX for Dummies Questions & Answers

Popper message

the popper deamon reports this error: Apr 10 12:26:03 < server > popper: Client at "xxx.xxx.xxx.xxx" resolves to an unknown host name "router.dummyname.nl" does anyone know why and how to resolve this? server = FreeBsd 4.2 Thanks in advance.. (3 Replies)
Discussion started by: Cozmic
3 Replies
Login or Register to Ask a Question
pdffonts(1)						      General Commands Manual						       pdffonts(1)

NAME
pdffonts - Portable Document Format (PDF) font analyzer (version 3.00) SYNOPSIS
pdffonts [options] [PDF-file] DESCRIPTION
Pdffonts lists the fonts used in a Portable Document Format (PDF) file along with various information for each font. The following information is listed for each font: name the font name, exactly as given in the PDF file (potentially including a subset prefix) type the font type -- see below for details emb "yes" if the font is embedded in the PDF file sub "yes" if the font is a subset uni "yes" if there is an explicit "ToUnicode" map in the PDF file (the absence of a ToUnicode map doesn't necessarily mean that the text can't be converted to Unicode) object ID the font dictionary object ID (number and generation) PDF files can contain the following types of fonts: Type 1 Type 1C -- aka Compact Font Format (CFF) Type 3 TrueType CID Type 0 -- 16-bit font with no specified type CID Type 0C -- 16-bit PostScript CFF font CID TrueType -- 16-bit TrueType font OPTIONS
-f number Specifies the first page to analyze. -l number Specifies the last page to analyze. -opw password Specify the owner password for the PDF file. Providing this will bypass all security restrictions. -upw password Specify the user password for the PDF file. -v Print copyright and version information. -h Print usage information. (-help and --help are equivalent.) EXIT CODES
The Xpdf tools use the following exit codes: 0 No error. 1 Error opening a PDF file. 2 Error opening an output file. 3 Error related to PDF permissions. 99 Other error. AUTHOR
The pdffonts software and documentation are copyright 1996-2004 Glyph & Cog, LLC. SEE ALSO
pdfimages(1), pdfinfo(1), pdftocairo(1), pdftohtml(1), pdftoppm(1), pdftops(1), pdftotext(1) 22 January 2004 pdffonts(1)