9.3 - MDVSA-2010:096

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Informations
Name	MDVSA-2010:096	First vendor Publication	2010-05-17
Vendor	Mandriva	Last vendor Modification	2010-05-17
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Multiple vulnerabilities has been discovered and fixed in tetex:

Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) setBitmap and (2) readSymbolDictSeg (CVE-2009-0146).

Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier allow remote attackers to cause a denial of service (crash) via a crafted PDF file (CVE-2009-0147).

The JBIG2 decoder in Xpdf 3.02pl2 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory (CVE-2009-0166).

Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments (CVE-2009-0195).

Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a long .bib bibliography file (CVE-2009-1284).

Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow (CVE-2009-3608).

Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file (CVE-2010-0827).

Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file (CVE-2010-0829).

Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information (CVE-2010-0739).

Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739 (CVE-2010-1440).

The corrected packages solves these problems.

Original Source

Url : http://www.mandriva.com/security/advisories?name=MDVSA-2010:096

CWE : Common Weakness Enumeration

%	Id	Name
50 %	CWE-189	Numeric Errors (CWE/SANS Top 25)
40 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
10 %	CWE-399	Resource Management Errors

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10052

Oval ID:	oval:org.mitre.oval:def:10052
Title:	Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.
Description:	Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0827	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section tetex-latex is earlier than 0:1.0.7-67.19 AND tetex-afm is earlier than 0:1.0.7-67.19 AND tetex-xdvi is earlier than 0:1.0.7-67.19 AND tetex-dvips is earlier than 0:1.0.7-67.19 AND tetex-doc is earlier than 0:1.0.7-67.19 AND tetex-fonts is earlier than 0:1.0.7-67.19 AND tetex is earlier than 0:1.0.7-67.19 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex is earlier than 0:2.0.2-22.0.1.EL4.16

Definition Id: oval:org.mitre.oval:def:10068

Oval ID:	oval:org.mitre.oval:def:10068
Title:	Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.
Description:	Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-1440	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section tetex-latex is earlier than 0:1.0.7-67.19 AND tetex-afm is earlier than 0:1.0.7-67.19 AND tetex-xdvi is earlier than 0:1.0.7-67.19 AND tetex-dvips is earlier than 0:1.0.7-67.19 AND tetex-doc is earlier than 0:1.0.7-67.19 AND tetex-fonts is earlier than 0:1.0.7-67.19 AND tetex is earlier than 0:1.0.7-67.19 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex is earlier than 0:2.0.2-22.0.1.EL4.16 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND tetex is earlier than 0:3.0-33.8.el5_5.5

Definition Id: oval:org.mitre.oval:def:10076

Oval ID:	oval:org.mitre.oval:def:10076
Title:	Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.
Description:	Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0195	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND xpdf is earlier than 1:2.02-14.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics-devel is earlier than 7:3.3.1-13.el4 AND tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics is earlier than 7:3.3.1-13.el4 AND tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex is earlier than 0:2.0.2-22.0.1.EL4.16 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4 AND cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16 AND xpdf is earlier than 1:3.00-20.el4 AND tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section kdegraphics-devel is earlier than 7:3.5.4-12.el5_3 AND cups-lpd is earlier than 1:1.3.7-8.el5_3.4 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND kdegraphics is earlier than 7:3.5.4-12.el5_3 AND poppler is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND cups-libs is earlier than 1:1.3.7-8.el5_3.4 AND tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9 AND cups-devel is earlier than 1:1.3.7-8.el5_3.4 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND cups is earlier than 1:1.3.7-8.el5_3.4

Definition Id: oval:org.mitre.oval:def:11468

Oval ID:	oval:org.mitre.oval:def:11468
Title:	Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
Description:	Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0739	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section tetex-latex is earlier than 0:1.0.7-67.19 AND tetex-afm is earlier than 0:1.0.7-67.19 AND tetex-xdvi is earlier than 0:1.0.7-67.19 AND tetex-dvips is earlier than 0:1.0.7-67.19 AND tetex-doc is earlier than 0:1.0.7-67.19 AND tetex-fonts is earlier than 0:1.0.7-67.19 AND tetex is earlier than 0:1.0.7-67.19 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex is earlier than 0:2.0.2-22.0.1.EL4.16 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND tetex is earlier than 0:3.0-33.8.el5_5.5

Definition Id: oval:org.mitre.oval:def:11582

Oval ID:	oval:org.mitre.oval:def:11582
Title:	DSA-2048 dvipng -- buffer overflow
Description:	Dan Rosenberg discovered that in dvipng, a utility that converts DVI files to PNG graphics, several array index errors allow context-dependent attackers, via a specially crafted DVI file, to cause a denial of service, and possibly arbitrary code execution.
Family:	unix	Class:	patch
Reference(s):	DSA-2048 CVE-2010-0829	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	dvipng
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is mipsel AND Installed architecture is hppa AND dvipng is earlier than 1.11-1+lenny1

Definition Id: oval:org.mitre.oval:def:13292

Oval ID:	oval:org.mitre.oval:def:13292
Title:	USN-936-1 -- dvipng vulnerability
Description:	Dan Rosenberg discovered that dvipng incorrectly handled certain malformed dvi files. If a user or automated system were tricked into processing a specially crafted dvi file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program.
Family:	unix	Class:	patch
Reference(s):	USN-936-1 CVE-2010-0829	Version:	5
Platform(s):	Ubuntu 10.04 Ubuntu 9.04 Ubuntu 9.10	Product(s):	dvipng
Definition Synopsis:
Release section Ubuntu 10.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND dvipng DPKG is earlier than 1.12-3ubuntu0.1 OR Release section Ubuntu 9.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND dvipng DPKG is earlier than 1.11-1ubuntu0.9.04.1 OR Release section Ubuntu 9.10 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND dvipng DPKG is earlier than 1.11-1ubuntu0.9.10.1

Definition Id: oval:org.mitre.oval:def:13355

Oval ID:	oval:org.mitre.oval:def:13355
Title:	USN-973-1 -- koffice vulnerabilities
Description:	Will Dormann, Alin Rad Pop, Braden Thomas, and Drew Yao discovered that the Xpdf used in KOffice contained multiple security issues in its JBIG2 decoder. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program. It was discovered that the Xpdf used in KOffice contained multiple security issues when parsing malformed PDF documents. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program. KOffice in Ubuntu 9.04 uses a very old version of Xpdf to import PDFs into KWord. Upstream KDE no longer supports PDF import in KOffice and as a result it was dropped in Ubuntu 9.10. While an attempt was made to fix the above issues, the maintenance burden for supporting this very old version of Xpdf outweighed its utility, and PDF import is now also disabled in Ubuntu 9.04.
Family:	unix	Class:	patch
Reference(s):	USN-973-1 CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-3606 CVE-2009-3608 CVE-2009-3609 CVE-2009-0165 CVE-2009-0195	Version:	5
Platform(s):	Ubuntu 9.04	Product(s):	koffice
Definition Synopsis:
Ubuntu 9.04 is installed Architecture section Architecture independent section Installed architecture is all AND Packages section krita-data DPKG is earlier than 1.6.3-7ubuntu6.1 AND koffice-doc DPKG is earlier than 1.6.3-7ubuntu6.1 AND koffice-doc-html DPKG is earlier than 1.6.3-7ubuntu6.1 AND kivio-data DPKG is earlier than 1.6.3-7ubuntu6.1 AND koffice DPKG is earlier than 1.6.3-7ubuntu6.1 AND koffice-data DPKG is earlier than 1.6.3-7ubuntu6.1 AND kword-data DPKG is earlier than 1.6.3-7ubuntu6.1 AND kpresenter-data DPKG is earlier than 1.6.3-7ubuntu6.1 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section karbon DPKG is earlier than 1.6.3-7ubuntu6.1 AND kivio DPKG is earlier than 1.6.3-7ubuntu6.1 AND kthesaurus DPKG is earlier than 1.6.3-7ubuntu6.1 AND koffice-dbg DPKG is earlier than 1.6.3-7ubuntu6.1 AND koffice-dev DPKG is earlier than 1.6.3-7ubuntu6.1 AND kugar DPKG is earlier than 1.6.3-7ubuntu6.1 AND krita DPKG is earlier than 1.6.3-7ubuntu6.1 AND kplato DPKG is earlier than 1.6.3-7ubuntu6.1 AND kchart DPKG is earlier than 1.6.3-7ubuntu6.1 AND koffice-libs DPKG is earlier than 1.6.3-7ubuntu6.1 AND kexi DPKG is earlier than 1.6.3-7ubuntu6.1 AND koshell DPKG is earlier than 1.6.3-7ubuntu6.1 AND kspread DPKG is earlier than 1.6.3-7ubuntu6.1 AND kpresenter DPKG is earlier than 1.6.3-7ubuntu6.1 AND kword DPKG is earlier than 1.6.3-7ubuntu6.1 AND kformula DPKG is earlier than 1.6.3-7ubuntu6.1

Definition Id: oval:org.mitre.oval:def:13403

Oval ID:	oval:org.mitre.oval:def:13403
Title:	USN-937-1 -- texlive-bin vulnerabilities
Description:	It was discovered that TeX Live incorrectly handled certain long .bib bibliography files. If a user or automated system were tricked into processing a specially crafted bib file, an attacker could cause a denial of service via application crash. This issue only affected Ubuntu 8.04 LTS, 9.04 and 9.10. Marc Schoenefeld, Karel Šrot and Ludwig Nussel discovered that TeX Live incorrectly handled certain malformed dvi files. If a user or automated system were tricked into processing a specially crafted dvi file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Dan Rosenberg discovered that TeX Live incorrectly handled certain malformed dvi files. If a user or automated system were tricked into processing a specially crafted dvi file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program
Family:	unix	Class:	patch
Reference(s):	USN-937-1 CVE-2009-1284 CVE-2010-0739 CVE-2010-1440 CVE-2010-0827	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.04 Ubuntu 9.04 Ubuntu 9.10	Product(s):	texlive-bin
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libkpathsea-dev DPKG is earlier than 2007.dfsg.1-2ubuntu0.1 AND texlive-base-bin-doc DPKG is earlier than 2007.dfsg.1-2ubuntu0.1 AND texlive-xetex DPKG is earlier than 2007.dfsg.1-2ubuntu0.1 AND texlive-base-bin DPKG is earlier than 2007.dfsg.1-2ubuntu0.1 AND texlive-extra-utils DPKG is earlier than 2007.dfsg.1-2ubuntu0.1 AND texlive-music DPKG is earlier than 2007.dfsg.1-2ubuntu0.1 AND texlive-lang-indic DPKG is earlier than 2007.dfsg.1-2ubuntu0.1 AND libkpathsea4 DPKG is earlier than 2007.dfsg.1-2ubuntu0.1 AND texlive-metapost DPKG is earlier than 2007.dfsg.1-2ubuntu0.1 AND texlive-metapost-doc DPKG is earlier than 2007.dfsg.1-2ubuntu0.1 AND texlive-omega DPKG is earlier than 2007.dfsg.1-2ubuntu0.1 AND texlive-font-utils DPKG is earlier than 2007.dfsg.1-2ubuntu0.1 OR Release section Ubuntu 10.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section texlive-binaries DPKG is earlier than 2009-5ubuntu0.1 AND libkpathsea-dev DPKG is earlier than 2009-5ubuntu0.1 AND libkpathsea5 DPKG is earlier than 2009-5ubuntu0.1 OR Release section Ubuntu 9.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libkpathsea-dev DPKG is earlier than 2007.dfsg.2-4ubuntu2.1 AND texlive-base-bin-doc DPKG is earlier than 2007.dfsg.2-4ubuntu2.1 AND texlive-xetex DPKG is earlier than 2007.dfsg.2-4ubuntu2.1 AND texlive-base-bin DPKG is earlier than 2007.dfsg.2-4ubuntu2.1 AND texlive-extra-utils DPKG is earlier than 2007.dfsg.2-4ubuntu2.1 AND texlive-music DPKG is earlier than 2007.dfsg.2-4ubuntu2.1 AND texlive-lang-indic DPKG is earlier than 2007.dfsg.2-4ubuntu2.1 AND libkpathsea4 DPKG is earlier than 2007.dfsg.2-4ubuntu2.1 AND texlive-metapost DPKG is earlier than 2007.dfsg.2-4ubuntu2.1 AND texlive-metapost-doc DPKG is earlier than 2007.dfsg.2-4ubuntu2.1 AND texlive-omega DPKG is earlier than 2007.dfsg.2-4ubuntu2.1 AND texlive-font-utils DPKG is earlier than 2007.dfsg.2-4ubuntu2.1 OR Release section Ubuntu 9.10 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libkpathsea-dev DPKG is earlier than 2007.dfsg.2-7ubuntu1.1 AND texlive-base-bin-doc DPKG is earlier than 2007.dfsg.2-7ubuntu1.1 AND texlive-xetex DPKG is earlier than 2007.dfsg.2-7ubuntu1.1 AND texlive-base-bin DPKG is earlier than 2007.dfsg.2-7ubuntu1.1 AND texlive-extra-utils DPKG is earlier than 2007.dfsg.2-7ubuntu1.1 AND texlive-music DPKG is earlier than 2007.dfsg.2-7ubuntu1.1 AND texlive-lang-indic DPKG is earlier than 2007.dfsg.2-7ubuntu1.1 AND libkpathsea4 DPKG is earlier than 2007.dfsg.2-7ubuntu1.1 AND texlive-metapost DPKG is earlier than 2007.dfsg.2-7ubuntu1.1 AND texlive-metapost-doc DPKG is earlier than 2007.dfsg.2-7ubuntu1.1 AND texlive-omega DPKG is earlier than 2007.dfsg.2-7ubuntu1.1 AND texlive-font-utils DPKG is earlier than 2007.dfsg.2-7ubuntu1.1

Definition Id: oval:org.mitre.oval:def:22251

Oval ID:	oval:org.mitre.oval:def:22251
Title:	RHSA-2010:0400: tetex security update (Moderate)
Description:	Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0400-01 CESA-2010:0400 CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 CVE-2009-0195 CVE-2009-0791 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 CVE-2009-3608 CVE-2009-3609 CVE-2010-0739 CVE-2010-0829 CVE-2010-1440	Version:	224
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	tetex
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5

Definition Id: oval:org.mitre.oval:def:23168

Oval ID:	oval:org.mitre.oval:def:23168
Title:	ELSA-2010:0400: tetex security update (Moderate)
Description:	Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0400-01 CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 CVE-2009-0195 CVE-2009-0791 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 CVE-2009-3608 CVE-2009-3609 CVE-2010-0739 CVE-2010-0829 CVE-2010-1440	Version:	73
Platform(s):	Oracle Linux 5	Product(s):	tetex
Definition Synopsis:
Oracle Linux 5.x rpm test tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5

Definition Id: oval:org.mitre.oval:def:27276

Oval ID:	oval:org.mitre.oval:def:27276
Title:	DEPRECATED: ELSA-2010-0400 -- tetex security update (moderate)
Description:	[3.0-33.8.el5.5] - unify patches for CVE-2010-0739 and CVE-2010-1440 [3.0-33.8.el5.4] - fix CVE-2010-1440 (#586819) [3.0-33.8.el5.3] - initialize data in arithmetic coder elsewhere (CVE-2009-0146) [3.0-33.8.el5.2] - initialize dataLen to properly fix CVE-2009-0146 [3.0-33.8.el5.1] - fix CVE-2010-0739 CVE-2010-0829 CVE-2007-5936 CVE-2007-5937 CVE-2009-0146 CVE-2009-0195 CVE-2009-0147 CVE-2009-0166 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 CVE-2009-0791 CVE-2009-3608 CVE-2009-3609 Resolves: #577328
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0400 CVE-2010-0739 CVE-2010-0829 CVE-2009-0166 CVE-2009-0195 CVE-2009-0791 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 CVE-2009-3608 CVE-2009-3609 CVE-2010-1440 CVE-2009-0146 CVE-2009-0147	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	tetex
Definition Synopsis:
Oracle Linux 5.x Packages match section tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5

Definition Id: oval:org.mitre.oval:def:9536

Oval ID:	oval:org.mitre.oval:def:9536
Title:	Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Description:	Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3608	Version:	5
Platform(s):	Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section kdegraphics-devel is earlier than 7:3.3.1-15.el4_8.2 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_8.5 AND xpdf is earlier than 1:3.00-22.el4_8.1 AND kdegraphics is earlier than 7:3.3.1-15.el4_8.2 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section kdegraphics-devel is earlier than 7:3.5.4-15.el5_4.2 AND cups-lpd is earlier than 1:1.3.7-11.el5_4.3 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND kdegraphics is earlier than 7:3.5.4-15.el5_4.2 AND poppler is earlier than 0:0.5.4-4.4.el5_4.11 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND cups-libs is earlier than 1:1.3.7-11.el5_4.3 AND tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_4.11 AND tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_4.11 AND cups-devel is earlier than 1:1.3.7-11.el5_4.3 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND cups is earlier than 1:1.3.7-11.el5_4.3

Definition Id: oval:org.mitre.oval:def:9632

Oval ID:	oval:org.mitre.oval:def:9632
Title:	Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) JBIG2Stream::readSymbolDictSeg.
Description:	Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) JBIG2Stream::readSymbolDictSeg.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0146	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND xpdf is earlier than 1:2.02-14.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics-devel is earlier than 7:3.3.1-13.el4 AND tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics is earlier than 7:3.3.1-13.el4 AND tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex is earlier than 0:2.0.2-22.0.1.EL4.16 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4 AND cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16 AND xpdf is earlier than 1:3.00-20.el4 AND tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section kdegraphics-devel is earlier than 7:3.5.4-12.el5_3 AND cups-lpd is earlier than 1:1.3.7-8.el5_3.4 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND kdegraphics is earlier than 7:3.5.4-12.el5_3 AND poppler is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND cups-libs is earlier than 1:1.3.7-8.el5_3.4 AND tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9 AND cups-devel is earlier than 1:1.3.7-8.el5_3.4 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND cups is earlier than 1:1.3.7-8.el5_3.4

Definition Id: oval:org.mitre.oval:def:9718

Oval ID:	oval:org.mitre.oval:def:9718
Title:	Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file.
Description:	Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0829	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND tetex is earlier than 0:3.0-33.8.el5_5.5

Definition Id: oval:org.mitre.oval:def:9778

Oval ID:	oval:org.mitre.oval:def:9778
Title:	The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory.
Description:	The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0166	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND xpdf is earlier than 1:2.02-14.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics-devel is earlier than 7:3.3.1-13.el4 AND tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics is earlier than 7:3.3.1-13.el4 AND tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex is earlier than 0:2.0.2-22.0.1.EL4.16 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4 AND cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16 AND xpdf is earlier than 1:3.00-20.el4 AND tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section kdegraphics-devel is earlier than 7:3.5.4-12.el5_3 AND cups-lpd is earlier than 1:1.3.7-8.el5_3.4 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND kdegraphics is earlier than 7:3.5.4-12.el5_3 AND poppler is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND cups-libs is earlier than 1:1.3.7-8.el5_3.4 AND tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9 AND cups-devel is earlier than 1:1.3.7-8.el5_3.4 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND cups is earlier than 1:1.3.7-8.el5_3.4

Definition Id: oval:org.mitre.oval:def:9941

Oval ID:	oval:org.mitre.oval:def:9941
Title:	Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.
Description:	Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0147	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND xpdf is earlier than 1:2.02-14.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics-devel is earlier than 7:3.3.1-13.el4 AND tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics is earlier than 7:3.3.1-13.el4 AND tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex is earlier than 0:2.0.2-22.0.1.EL4.16 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4 AND cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16 AND xpdf is earlier than 1:3.00-20.el4 AND tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section kdegraphics-devel is earlier than 7:3.5.4-12.el5_3 AND cups-lpd is earlier than 1:1.3.7-8.el5_3.4 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND kdegraphics is earlier than 7:3.5.4-12.el5_3 AND poppler is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND cups-libs is earlier than 1:1.3.7-8.el5_3.4 AND tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9 AND cups-devel is earlier than 1:1.3.7-8.el5_3.4 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND cups is earlier than 1:1.3.7-8.el5_3.4

CPE : Common Platform Enumeration

Type	Description	Count
Application	Apple Cups cpe:2.3:a:apple:cups:1.3.9:::::::* cpe:2.3:a:apple:cups:1.3.8:::::::* cpe:2.3:a:apple:cups:1.3.7:::::::* cpe:2.3:a:apple:cups:1.3.6:::::::* cpe:2.3:a:apple:cups:1.3.5:::::::* cpe:2.3:a:apple:cups:1.3.4:::::::* cpe:2.3:a:apple:cups:1.3.3:::::::* cpe:2.3:a:apple:cups:1.3.2:::::::* cpe:2.3:a:apple:cups:1.3.11:::::::* cpe:2.3:a:apple:cups:1.3.10:::::::* cpe:2.3:a:apple:cups:1.3.1:::::::* cpe:2.3:a:apple:cups:1.3.0:::::::* cpe:2.3:a:apple:cups:1.3:rc1:::::: cpe:2.3:a:apple:cups:1.3:b1:::::: cpe:2.3:a:apple:cups:1.3:rc2:::::: cpe:2.3:a:apple:cups:1.2.9:::::::* cpe:2.3:a:apple:cups:1.2.8:::::::* cpe:2.3:a:apple:cups:1.2.7:::::::* cpe:2.3:a:apple:cups:1.2.6:::::::* cpe:2.3:a:apple:cups:1.2.5:::::::* cpe:2.3:a:apple:cups:1.2.4:::::::* cpe:2.3:a:apple:cups:1.2.3:::::::* cpe:2.3:a:apple:cups:1.2.2:::::::* cpe:2.3:a:apple:cups:1.2.12:::::::* cpe:2.3:a:apple:cups:1.2.11:::::::* cpe:2.3:a:apple:cups:1.2.10:::::::* cpe:2.3:a:apple:cups:1.2.1:::::::* cpe:2.3:a:apple:cups:1.2.0:::::::* cpe:2.3:a:apple:cups:1.2:b1:::::: cpe:2.3:a:apple:cups:1.2:b2:::::: cpe:2.3:a:apple:cups:1.2:rc3:::::: cpe:2.3:a:apple:cups:1.2:rc2:::::: cpe:2.3:a:apple:cups:1.2:rc1:::::: cpe:2.3:a:apple:cups:1.1.9-1:::::::* cpe:2.3:a:apple:cups:1.1.9:::::::* cpe:2.3:a:apple:cups:1.1.8:::::::* cpe:2.3:a:apple:cups:1.1.7:::::::* cpe:2.3:a:apple:cups:1.1.6-3:::::::* cpe:2.3:a:apple:cups:1.1.6-2:::::::* cpe:2.3:a:apple:cups:1.1.6-1:::::::* cpe:2.3:a:apple:cups:1.1.6:::::::* cpe:2.3:a:apple:cups:1.1.5-2:::::::* cpe:2.3:a:apple:cups:1.1.5-1:::::::* cpe:2.3:a:apple:cups:1.1.5:::::::* cpe:2.3:a:apple:cups:1.1.4:::::::* cpe:2.3:a:apple:cups:1.1.3:::::::* cpe:2.3:a:apple:cups:1.1.23:rc1:::::: cpe:2.3:a:apple:cups:1.1.23:::::::* cpe:2.3:a:apple:cups:1.1.22:::::::* cpe:2.3:a:apple:cups:1.1.22:rc1:::::: cpe:2.3:a:apple:cups:1.1.22:rc2:::::: cpe:2.3:a:apple:cups:1.1.21:rc2:::::: cpe:2.3:a:apple:cups:1.1.21:rc1:::::: cpe:2.3:a:apple:cups:1.1.21:::::::* cpe:2.3:a:apple:cups:1.1.21:-:::::: cpe:2.3:a:apple:cups:1.1.20:rc3:::::: cpe:2.3:a:apple:cups:1.1.20:::::::* cpe:2.3:a:apple:cups:1.1.20:rc5:::::: cpe:2.3:a:apple:cups:1.1.20:rc4:::::: cpe:2.3:a:apple:cups:1.1.20:rc2:::::: cpe:2.3:a:apple:cups:1.1.20:rc1:::::: cpe:2.3:a:apple:cups:1.1.20:rc6:::::: cpe:2.3:a:apple:cups:1.1.2:::::::* cpe:2.3:a:apple:cups:1.1.19:rc1:::::: cpe:2.3:a:apple:cups:1.1.19:rc3:::::: cpe:2.3:a:apple:cups:1.1.19:rc2:::::: cpe:2.3:a:apple:cups:1.1.19:rc5:::::: cpe:2.3:a:apple:cups:1.1.19:rc4:::::: cpe:2.3:a:apple:cups:1.1.19:::::::* cpe:2.3:a:apple:cups:1.1.18:::::::* cpe:2.3:a:apple:cups:1.1.17:::::::* cpe:2.3:a:apple:cups:1.1.16:::::::* cpe:2.3:a:apple:cups:1.1.15:::::::* cpe:2.3:a:apple:cups:1.1.14:::::::* cpe:2.3:a:apple:cups:1.1.13:::::::* cpe:2.3:a:apple:cups:1.1.12:::::::* cpe:2.3:a:apple:cups:1.1.11:::::::* cpe:2.3:a:apple:cups:1.1.10-1:::::::* cpe:2.3:a:apple:cups:1.1.10:::::::* cpe:2.3:a:apple:cups:1.1.1:::::::* cpe:2.3:a:apple:cups:1.1:::::::* cpe:2.3:a:apple:cups:::::::: cpe:2.3:a:apple:cups:-:::::::*	83
Application	Bibtex cpe:2.3:a:bibtex:bibtex:0.99:::::::*	1
Application	Foolabs Xpdf cpe:2.3:a:foolabs:xpdf:3.02pl3:::::::* cpe:2.3:a:foolabs:xpdf:3.02pl2:::::::* cpe:2.3:a:foolabs:xpdf:3.02pl1:::::::* cpe:2.3:a:foolabs:xpdf:3.0.1:::::::* cpe:2.3:a:foolabs:xpdf:1.00a:::::::* cpe:2.3:a:foolabs:xpdf:0.93c:::::::* cpe:2.3:a:foolabs:xpdf:0.93b:::::::* cpe:2.3:a:foolabs:xpdf:0.93a:::::::* cpe:2.3:a:foolabs:xpdf:0.92e:::::::* cpe:2.3:a:foolabs:xpdf:0.92d:::::::* cpe:2.3:a:foolabs:xpdf:0.92c:::::::* cpe:2.3:a:foolabs:xpdf:0.92b:::::::* cpe:2.3:a:foolabs:xpdf:0.92a:::::::* cpe:2.3:a:foolabs:xpdf:0.91c:::::::* cpe:2.3:a:foolabs:xpdf:0.91b:::::::* cpe:2.3:a:foolabs:xpdf:0.91a:::::::* cpe:2.3:a:foolabs:xpdf:0.7a:::::::* cpe:2.3:a:foolabs:xpdf:0.5a:::::::*	18
Application	Glyphandcog Xpdfreader cpe:2.3:a:glyphandcog:xpdfreader:3.02:::::::* cpe:2.3:a:glyphandcog:xpdfreader:3.01:::::::* cpe:2.3:a:glyphandcog:xpdfreader:3.00:::::::* cpe:2.3:a:glyphandcog:xpdfreader:2.03:::::::* cpe:2.3:a:glyphandcog:xpdfreader:2.02:::::::* cpe:2.3:a:glyphandcog:xpdfreader:2.01:::::::* cpe:2.3:a:glyphandcog:xpdfreader:2.00:::::::* cpe:2.3:a:glyphandcog:xpdfreader:1.01:::::::* cpe:2.3:a:glyphandcog:xpdfreader:1.00:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.93:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.92:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.91:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.90:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.80:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.7:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.6:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.5:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.4:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.3:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.2:::::::* cpe:2.3:a:glyphandcog:xpdfreader::::::::	21
Application	Jan-Ake Larsson Dvipng cpe:2.3:a:jan-ake_larsson:dvipng:1.12:::::::* cpe:2.3:a:jan-ake_larsson:dvipng:1.11:::::::*	2
Application	Poppler cpe:2.3:a:poppler:poppler:0.9.3:::::::* cpe:2.3:a:poppler:poppler:0.9.2:::::::* cpe:2.3:a:poppler:poppler:0.9.1:::::::* cpe:2.3:a:poppler:poppler:0.9.0:::::::* cpe:2.3:a:poppler:poppler:0.8.7:::::::* cpe:2.3:a:poppler:poppler:0.8.6:::::::* cpe:2.3:a:poppler:poppler:0.8.5:::::::* cpe:2.3:a:poppler:poppler:0.8.4:::::::* cpe:2.3:a:poppler:poppler:0.8.3:::::::* cpe:2.3:a:poppler:poppler:0.8.2:::::::* cpe:2.3:a:poppler:poppler:0.8.1:::::::* cpe:2.3:a:poppler:poppler:0.8.0:::::::* cpe:2.3:a:poppler:poppler:0.7.3:::::::* cpe:2.3:a:poppler:poppler:0.7.2:::::::* cpe:2.3:a:poppler:poppler:0.7.1:::::::* cpe:2.3:a:poppler:poppler:0.7.0:::::::* cpe:2.3:a:poppler:poppler:0.6.4:::::::* cpe:2.3:a:poppler:poppler:0.6.3:::::::* cpe:2.3:a:poppler:poppler:0.6.2:::::::* cpe:2.3:a:poppler:poppler:0.6.1:::::::* cpe:2.3:a:poppler:poppler:0.6.0:::::::* cpe:2.3:a:poppler:poppler:0.5.91:::::::* cpe:2.3:a:poppler:poppler:0.5.90:::::::* cpe:2.3:a:poppler:poppler:0.5.9:::::::* cpe:2.3:a:poppler:poppler:0.5.4:::::::* cpe:2.3:a:poppler:poppler:0.5.3:::::::* cpe:2.3:a:poppler:poppler:0.5.2:::::::* cpe:2.3:a:poppler:poppler:0.5.1:::::::* cpe:2.3:a:poppler:poppler:0.5.0:::::::* cpe:2.3:a:poppler:poppler:0.4.4:::::::* cpe:2.3:a:poppler:poppler:0.4.3:::::::* cpe:2.3:a:poppler:poppler:0.4.2:::::::* cpe:2.3:a:poppler:poppler:0.4.1:::::::* cpe:2.3:a:poppler:poppler:0.4.0:::::::* cpe:2.3:a:poppler:poppler:0.3.3:::::::* cpe:2.3:a:poppler:poppler:0.3.2:::::::* cpe:2.3:a:poppler:poppler:0.3.1:::::::* cpe:2.3:a:poppler:poppler:0.3.0:::::::* cpe:2.3:a:poppler:poppler:0.2.0:::::::* cpe:2.3:a:poppler:poppler:0.12.0:::::::* cpe:2.3:a:poppler:poppler:0.11.3:::::::* cpe:2.3:a:poppler:poppler:0.11.2:::::::* cpe:2.3:a:poppler:poppler:0.11.1:::::::* cpe:2.3:a:poppler:poppler:0.11.0:::::::* cpe:2.3:a:poppler:poppler:0.10.7:::::::* cpe:2.3:a:poppler:poppler:0.10.6:::::::* cpe:2.3:a:poppler:poppler:0.10.5:::::::* cpe:2.3:a:poppler:poppler:0.10.4:::::::* cpe:2.3:a:poppler:poppler:0.10.3:::::::* cpe:2.3:a:poppler:poppler:0.10.2:::::::* cpe:2.3:a:poppler:poppler:0.10.1:::::::* cpe:2.3:a:poppler:poppler:0.10.0:::::::* cpe:2.3:a:poppler:poppler:0.1.2:::::::* cpe:2.3:a:poppler:poppler:0.1.1:::::::* cpe:2.3:a:poppler:poppler:0.1:::::::* cpe:2.3:a:poppler:poppler::::::::	56
Application	Tug Tetex cpe:2.3:a:tug:tetex::::::::	1
Application	Tug Tex Live cpe:2.3:a:tug:tex_live:2008:::::::* cpe:2.3:a:tug:tex_live:2007:::::::* cpe:2.3:a:tug:tex_live:2005:::::::* cpe:2.3:a:tug:tex_live:2004:::::::* cpe:2.3:a:tug:tex_live:2003:::::::* cpe:2.3:a:tug:tex_live:2002:::::::* cpe:2.3:a:tug:tex_live:2001:::::::* cpe:2.3:a:tug:tex_live:2000:::::::* cpe:2.3:a:tug:tex_live:1999:::::::* cpe:2.3:a:tug:tex_live:1998:::::::* cpe:2.3:a:tug:tex_live:1996:::::::* cpe:2.3:a:tug:tex_live:::::::: cpe:2.3:a:tug:tex_live:-:::::::*	13

OpenVAS Exploits

Date	Description
2012-08-10	Name : Gentoo Security Advisory GLSA 201206-28 (TeX Live) File : nvt/glsa_201206_28.nasl
2011-11-18	Name : Mandriva Update for poppler MDVSA-2011:175 (poppler) File : nvt/gb_mandriva_MDVSA_2011_175.nasl
2011-08-09	Name : CentOS Update for cups CESA-2009:0429 centos4 i386 File : nvt/gb_CESA-2009_0429_cups_centos4_i386.nasl
2011-08-09	Name : CentOS Update for cups CESA-2009:0429 centos5 i386 File : nvt/gb_CESA-2009_0429_cups_centos5_i386.nasl
2011-08-09	Name : CentOS Update for xpdf CESA-2009:0430 centos3 i386 File : nvt/gb_CESA-2009_0430_xpdf_centos3_i386.nasl
2011-08-09	Name : CentOS Update for xpdf CESA-2009:0430 centos4 i386 File : nvt/gb_CESA-2009_0430_xpdf_centos4_i386.nasl
2011-08-09	Name : CentOS Update for kdegraphics CESA-2009:0431 centos4 i386 File : nvt/gb_CESA-2009_0431_kdegraphics_centos4_i386.nasl
2011-08-09	Name : CentOS Update for kdegraphics CESA-2009:0431 centos5 i386 File : nvt/gb_CESA-2009_0431_kdegraphics_centos5_i386.nasl
2011-08-09	Name : CentOS Update for gpdf CESA-2009:0458 centos4 i386 File : nvt/gb_CESA-2009_0458_gpdf_centos4_i386.nasl
2011-08-09	Name : CentOS Update for poppler CESA-2009:0480 centos5 i386 File : nvt/gb_CESA-2009_0480_poppler_centos5_i386.nasl
2011-08-09	Name : CentOS Update for xpdf CESA-2009:1501 centos4 i386 File : nvt/gb_CESA-2009_1501_xpdf_centos4_i386.nasl
2011-08-09	Name : CentOS Update for kdegraphics CESA-2009:1502 centos5 i386 File : nvt/gb_CESA-2009_1502_kdegraphics_centos5_i386.nasl
2011-08-09	Name : CentOS Update for gpdf CESA-2009:1503 centos4 i386 File : nvt/gb_CESA-2009_1503_gpdf_centos4_i386.nasl
2011-08-09	Name : CentOS Update for poppler CESA-2009:1504 centos5 i386 File : nvt/gb_CESA-2009_1504_poppler_centos5_i386.nasl
2011-08-09	Name : CentOS Update for kdegraphics CESA-2009:1512 centos4 i386 File : nvt/gb_CESA-2009_1512_kdegraphics_centos4_i386.nasl
2011-08-09	Name : CentOS Update for cups CESA-2009:1513 centos5 i386 File : nvt/gb_CESA-2009_1513_cups_centos5_i386.nasl
2011-08-09	Name : CentOS Update for tetex CESA-2010:0400 centos5 i386 File : nvt/gb_CESA-2010_0400_tetex_centos5_i386.nasl
2010-08-20	Name : Ubuntu Update for koffice vulnerabilities USN-973-1 File : nvt/gb_ubuntu_USN_973_1.nasl
2010-06-03	Name : Debian Security Advisory DSA 2048-1 (dvipng) File : nvt/deb_2048_1.nasl
2010-06-03	Name : Debian Security Advisory DSA 2050-1 (kdegraphics) File : nvt/deb_2050_1.nasl
2010-05-28	Name : Fedora Update for texlive FEDORA-2010-8242 File : nvt/gb_fedora_2010_8242_texlive_fc12.nasl
2010-05-28	Name : Fedora Update for dvipng FEDORA-2010-8252 File : nvt/gb_fedora_2010_8252_dvipng_fc12.nasl
2010-05-28	Name : Fedora Update for texlive FEDORA-2010-8273 File : nvt/gb_fedora_2010_8273_texlive_fc11.nasl
2010-05-28	Name : Fedora Update for dvipng FEDORA-2010-8279 File : nvt/gb_fedora_2010_8279_dvipng_fc11.nasl
2010-05-17	Name : CentOS Update for tetex CESA-2010:0399 centos4 i386 File : nvt/gb_CESA-2010_0399_tetex_centos4_i386.nasl
2010-05-17	Name : CentOS Update for tetex CESA-2010:0401 centos3 i386 File : nvt/gb_CESA-2010_0401_tetex_centos3_i386.nasl
2010-05-17	Name : Mandriva Update for tetex MDVSA-2010:094 (tetex) File : nvt/gb_mandriva_MDVSA_2010_094.nasl
2010-05-12	Name : Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002 File : nvt/macosx_upd_10_5_7_secupd_2009-002.nasl
2010-05-07	Name : RedHat Update for tetex RHSA-2010:0399-01 File : nvt/gb_RHSA-2010_0399-01_tetex.nasl
2010-05-07	Name : RedHat Update for tetex RHSA-2010:0400-01 File : nvt/gb_RHSA-2010_0400-01_tetex.nasl
2010-05-07	Name : RedHat Update for tetex RHSA-2010:0401-01 File : nvt/gb_RHSA-2010_0401-01_tetex.nasl
2010-05-07	Name : Ubuntu Update for dvipng vulnerability USN-936-1 File : nvt/gb_ubuntu_USN_936_1.nasl
2010-05-07	Name : Ubuntu Update for texlive-bin vulnerabilities USN-937-1 File : nvt/gb_ubuntu_USN_937_1.nasl
2010-04-21	Name : Debian Security Advisory DSA 2028-1 (xpdf) File : nvt/deb_2028_1.nasl
2010-03-12	Name : Mandriva Update for irqbalance MDVA-2010:086 (irqbalance) File : nvt/gb_mandriva_MDVA_2010_086.nasl
2010-03-12	Name : Mandriva Update for mandriva-release MDVA-2010:087 (mandriva-release) File : nvt/gb_mandriva_MDVA_2010_087.nasl
2010-03-12	Name : Mandriva Update for nufw MDVA-2010:094 (nufw) File : nvt/gb_mandriva_MDVA_2010_094.nasl
2010-03-12	Name : Mandriva Update for mmc-wizard MDVA-2010:096 (mmc-wizard) File : nvt/gb_mandriva_MDVA_2010_096.nasl
2010-03-12	Name : Mandriva Update for mmc-wizard MDVA-2010:096-1 (mmc-wizard) File : nvt/gb_mandriva_MDVA_2010_096_1.nasl
2010-03-12	Name : Mandriva Update for poppler MDVSA-2010:055 (poppler) File : nvt/gb_mandriva_MDVSA_2010_055.nasl
2010-03-02	Name : Fedora Update for pdfedit FEDORA-2010-1377 File : nvt/gb_fedora_2010_1377_pdfedit_fc12.nasl
2010-03-02	Name : Fedora Update for pdfedit FEDORA-2010-1842 File : nvt/gb_fedora_2010_1842_pdfedit_fc11.nasl
2009-12-30	Name : Mandriva Security Advisory MDVSA-2009:334 (poppler) File : nvt/mdksa_2009_334.nasl
2009-12-14	Name : Mandriva Security Advisory MDVSA-2009:282-1 (cups) File : nvt/mdksa_2009_282_1.nasl
2009-12-14	Name : Mandriva Security Advisory MDVSA-2009:331 (kdegraphics) File : nvt/mdksa_2009_331.nasl
2009-12-10	Name : Mandriva Security Advisory MDVSA-2009:287-1 (xpdf) File : nvt/mdksa_2009_287_1.nasl
2009-12-03	Name : Debian Security Advisory DSA 1941-1 (poppler) File : nvt/deb_1941_1.nasl
2009-11-23	Name : Ubuntu USN-850-3 (poppler) File : nvt/ubuntu_850_3.nasl
2009-11-17	Name : Fedora Core 10 FEDORA-2009-10730 (texlive) File : nvt/fcore_2009_10730.nasl
2009-11-17	Name : Fedora Core 11 FEDORA-2009-10857 (texlive) File : nvt/fcore_2009_10857.nasl
2009-11-17	Name : Mac OS X Version File : nvt/macosx_version.nasl
2009-11-17	Name : SLES10: Security update for kdegraphics3-pdf File : nvt/sles10_kdegraphics3-pd0.nasl
2009-11-11	Name : Fedora Core 10 FEDORA-2009-10823 (poppler) File : nvt/fcore_2009_10823.nasl
2009-11-11	Name : Fedora Core 11 FEDORA-2009-10845 (poppler) File : nvt/fcore_2009_10845.nasl
2009-11-11	Name : CentOS Security Advisory CESA-2009:1502 (kdegraphics) File : nvt/ovcesa2009_1502.nasl
2009-11-11	Name : CentOS Security Advisory CESA-2009:1504 (poppler) File : nvt/ovcesa2009_1504.nasl
2009-11-11	Name : CentOS Security Advisory CESA-2009:1513 (cups) File : nvt/ovcesa2009_1513.nasl
2009-11-11	Name : SLES10: Security update for xpdf File : nvt/sles10_xpdf2.nasl
2009-11-11	Name : SuSE Security Summary SUSE-SR:2009:018 File : nvt/suse_sr_2009_018.nasl
2009-10-27	Name : Fedora Core 11 FEDORA-2009-10648 (xpdf) File : nvt/fcore_2009_10648.nasl
2009-10-27	Name : Fedora Core 10 FEDORA-2009-10694 (xpdf) File : nvt/fcore_2009_10694.nasl
2009-10-27	Name : FreeBSD Ports: xpdf File : nvt/freebsd_xpdf4.nasl
2009-10-27	Name : Mandrake Security Advisory MDVSA-2009:280 (cups) File : nvt/mdksa_2009_280.nasl
2009-10-27	Name : Mandrake Security Advisory MDVSA-2009:281 (cups) File : nvt/mdksa_2009_281.nasl
2009-10-27	Name : Mandrake Security Advisory MDVSA-2009:282 (cups) File : nvt/mdksa_2009_282.nasl
2009-10-27	Name : Mandrake Security Advisory MDVSA-2009:283 (cups) File : nvt/mdksa_2009_283.nasl
2009-10-27	Name : Mandrake Security Advisory MDVSA-2009:287 (xpdf) File : nvt/mdksa_2009_287.nasl
2009-10-27	Name : Ubuntu USN-850-1 (poppler) File : nvt/ubuntu_850_1.nasl
2009-10-19	Name : RedHat Security Advisory RHSA-2009:1501 File : nvt/RHSA_2009_1501.nasl
2009-10-19	Name : RedHat Security Advisory RHSA-2009:1502 File : nvt/RHSA_2009_1502.nasl
2009-10-19	Name : RedHat Security Advisory RHSA-2009:1503 File : nvt/RHSA_2009_1503.nasl
2009-10-19	Name : RedHat Security Advisory RHSA-2009:1504 File : nvt/RHSA_2009_1504.nasl
2009-10-19	Name : RedHat Security Advisory RHSA-2009:1512 File : nvt/RHSA_2009_1512.nasl
2009-10-19	Name : RedHat Security Advisory RHSA-2009:1513 File : nvt/RHSA_2009_1513.nasl
2009-10-19	Name : CentOS Security Advisory CESA-2009:1501 (xpdf) File : nvt/ovcesa2009_1501.nasl
2009-10-19	Name : CentOS Security Advisory CESA-2009:1503 (gpdf) File : nvt/ovcesa2009_1503.nasl
2009-10-19	Name : CentOS Security Advisory CESA-2009:1512 (kdegraphics) File : nvt/ovcesa2009_1512.nasl
2009-10-13	Name : SLES10: Security update for CUPS File : nvt/sles10_cups0.nasl
2009-10-13	Name : SLES10: Security update for kdegraphics3 File : nvt/sles10_kdegraphics3.nasl
2009-10-13	Name : SLES10: Security update for poppler File : nvt/sles10_poppler.nasl
2009-10-13	Name : SLES10: Security update for xpdf File : nvt/sles10_xpdf.nasl
2009-10-11	Name : SLES11: Security update for libpoppler4 File : nvt/sles11_libpoppler4.nasl
2009-10-10	Name : SLES9: Security update for CUPS File : nvt/sles9p5047860.nasl
2009-07-29	Name : Fedora Core 11 FEDORA-2009-6972 (poppler) File : nvt/fcore_2009_6972.nasl
2009-07-06	Name : SuSE Security Summary SUSE-SR:2009:012 File : nvt/suse_sr_2009_012.nasl
2009-06-30	Name : Fedora Core 10 FEDORA-2009-6973 (poppler) File : nvt/fcore_2009_6973.nasl
2009-06-30	Name : Fedora Core 9 FEDORA-2009-6982 (poppler) File : nvt/fcore_2009_6982.nasl
2009-05-25	Name : CentOS Security Advisory CESA-2009:0429 (cups) File : nvt/ovcesa2009_0429.nasl
2009-05-25	Name : CentOS Security Advisory CESA-2009:0430 (xpdf) File : nvt/ovcesa2009_0430.nasl
2009-05-25	Name : CentOS Security Advisory CESA-2009:0458 (gpdf) File : nvt/ovcesa2009_0458.nasl
2009-05-20	Name : RedHat Security Advisory RHSA-2009:0480 File : nvt/RHSA_2009_0480.nasl
2009-05-20	Name : CentOS Security Advisory CESA-2009:0431 (kdegraphics) File : nvt/ovcesa2009_0431.nasl
2009-05-20	Name : CentOS Security Advisory CESA-2009:0480 (poppler) File : nvt/ovcesa2009_0480.nasl
2009-05-20	Name : SuSE Security Summary SUSE-SR:2009:010 File : nvt/suse_sr_2009_010.nasl
2009-05-11	Name : Debian Security Advisory DSA 1790-1 (xpdf) File : nvt/deb_1790_1.nasl
2009-05-11	Name : Debian Security Advisory DSA 1793-1 (kdegraphics) File : nvt/deb_1793_1.nasl
2009-05-11	Name : FreeBSD Ports: cups-base File : nvt/freebsd_cups-base8.nasl
2009-05-06	Name : Xpdf Multiple Vulnerabilities File : nvt/secpod_xpdf_mult_vuln.nasl
2009-05-05	Name : RedHat Security Advisory RHSA-2009:0458 File : nvt/RHSA_2009_0458.nasl
2009-05-05	Name : Mandrake Security Advisory MDVSA-2009:101 (xpdf) File : nvt/mdksa_2009_101.nasl
2009-04-28	Name : Fedora Core 9 FEDORA-2009-3753 (cups) File : nvt/fcore_2009_3753.nasl
2009-04-28	Name : Fedora Core 10 FEDORA-2009-3769 (cups) File : nvt/fcore_2009_3769.nasl
2009-04-28	Name : Fedora Core 9 FEDORA-2009-3794 (xpdf) File : nvt/fcore_2009_3794.nasl
2009-04-28	Name : Fedora Core 10 FEDORA-2009-3820 (xpdf) File : nvt/fcore_2009_3820.nasl
2009-04-28	Name : Gentoo Security Advisory GLSA 200904-20 (cups) File : nvt/glsa_200904_20.nasl
2009-04-28	Name : SuSE Security Advisory SUSE-SA:2009:024 (cups) File : nvt/suse_sa_2009_024.nasl
2009-04-20	Name : RedHat Security Advisory RHSA-2009:0429 File : nvt/RHSA_2009_0429.nasl
2009-04-20	Name : RedHat Security Advisory RHSA-2009:0430 File : nvt/RHSA_2009_0430.nasl
2009-04-20	Name : RedHat Security Advisory RHSA-2009:0431 File : nvt/RHSA_2009_0431.nasl
2009-04-20	Name : FreeBSD Ports: xpdf File : nvt/freebsd_xpdf3.nasl
2009-04-20	Name : Ubuntu USN-759-1 (poppler) File : nvt/ubuntu_759_1.nasl
0000-00-00	Name : Slackware Advisory SSA:2009-116-01 cups File : nvt/esoft_slk_ssa_2009_116_01.nasl
0000-00-00	Name : Slackware Advisory SSA:2009-129-01 xpdf File : nvt/esoft_slk_ssa_2009_129_01.nasl
0000-00-00	Name : Slackware Advisory SSA:2009-302-01 xpdf File : nvt/esoft_slk_ssa_2009_302_01.nasl
0000-00-00	Name : Slackware Advisory SSA:2009-302-02 poppler File : nvt/esoft_slk_ssa_2009_302_02.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
64475	Tex Live dvipng set.c Utility Array Indexing Error Memory Corruption A memory corruption flaw exists in dvipng. The "SetChar" function fails to sanitize user-supplied input when the creator of a dvi file makes it index beyond the end of the array, resulting in memory corruption. With a specially crafted file, a local attacker can execute arbitrary code.
64389	Tex Live Unspecified DVI File Handling Issue
64388	Tex Live dospecial.c bbdospecial() Function DVI File Handling Overflow
63808	Tex Live dospecial.c predospecial() Function DVI File Handling Overflow
59184	Poppler XRef.cc ObjectStream::ObjectStream Function PDF Handling Overflow
59183	Xpdf XRef.cc ObjectStream::ObjectStream Function PDF Handling Overflow
54496	Xpdf JBIG2 Decoder PDF File Handling Multiple Function Overflows
54495	CUPS JBIG2 Decoder PDF File Handling Multiple Function Overflows
54491	Xpdf Crafted PDF File JBIG2 Symbol Dictionary Segments Handling Overflow
54490	CUPS Crafted PDF File JBIG2 Symbol Dictionary Segments Handling Overflow A remote overflow exists in CUPS. CUPS fails to handle a boundary when decoding JBIG2 dictionary segments resulting in a heap-based buffer overflow. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of integrity.
54489	Xpdf JBIG2 Decoder PDF File Handling Unitialized Memory Free DoS
54488	CUPS JBIG2 Decoder PDF File Handling Unitialized Memory Free DoS CUPS contains a flaw that may allow a remote denial of service. The issue is triggered when JBIG2 decoder receives a specially crafted PDF file causes a free of unitialized memory, and will result in loss of availability for the service.
53562	BibTeX BIB File Handling Overflow

Snort® IPS/IDS

Date	Description
2014-01-10	xpdf ObjectStream integer overflow RuleID : 24266 - Revision : 4 - Type : FILE-PDF
2014-01-10	CUPS and Xpdf JBIG2 symbol dictionary buffer overflow attempt RuleID : 17641 - Revision : 8 - Type : FILE-PDF
2014-01-10	XPDF ObjectStream integer overflow RuleID : 16335 - Revision : 9 - Type : FILE-PDF

Nessus® Vulnerability Scanner

Date	Description
2014-12-15	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201412-08.nasl - Type : ACT_GATHER_INFO
2013-10-07	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201310-03.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-0429.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2009-0430.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-0431.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2009-0458.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-0480.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2009-1501.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2009-1503.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1504.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1512.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1513.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0399.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0400.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0401.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20090416_cups_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20090416_kdegraphics_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20090416_xpdf_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20090430_gpdf_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20090513_poppler_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20091015_cups_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20091015_gpdf_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20091015_kdegraphics_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20091015_poppler_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20091015_xpdf_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100506_tetex_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100506_tetex_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100506_tetex_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-06-26	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201206-28.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_te_ams-7020.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_texlive-100504.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_kdegraphics3-pdf-6652.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_poppler-6743.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_xpdf-6560.nasl - Type : ACT_GATHER_INFO
2010-08-18	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-973-1.nasl - Type : ACT_GATHER_INFO
2010-07-30	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-280.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-1377.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-1805.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-1842.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-8242.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-8252.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-8273.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-8279.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-8314.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-8335.nasl - Type : ACT_GATHER_INFO
2010-06-01	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0400.nasl - Type : ACT_GATHER_INFO
2010-05-25	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2048.nasl - Type : ACT_GATHER_INFO
2010-05-25	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2050.nasl - Type : ACT_GATHER_INFO
2010-05-15	Name : The remote openSUSE host is missing a security update. File : suse_11_0_texlive-100503.nasl - Type : ACT_GATHER_INFO
2010-05-15	Name : The remote openSUSE host is missing a security update. File : suse_11_1_texlive-100503.nasl - Type : ACT_GATHER_INFO
2010-05-15	Name : The remote openSUSE host is missing a security update. File : suse_11_2_texlive-100504.nasl - Type : ACT_GATHER_INFO
2010-05-13	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-094.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0399.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0400.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0401.nasl - Type : ACT_GATHER_INFO
2010-05-10	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0399.nasl - Type : ACT_GATHER_INFO
2010-05-10	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0401.nasl - Type : ACT_GATHER_INFO
2010-05-07	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-936-1.nasl - Type : ACT_GATHER_INFO
2010-05-07	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-937-1.nasl - Type : ACT_GATHER_INFO
2010-04-06	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2028.nasl - Type : ACT_GATHER_INFO
2010-03-08	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-055.nasl - Type : ACT_GATHER_INFO
2010-02-24	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1941.nasl - Type : ACT_GATHER_INFO
2010-01-12	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libpoppler-devel-100111.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-0480.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2009-1501.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1502.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2009-1503.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1504.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1512.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1513.nasl - Type : ACT_GATHER_INFO
2010-01-03	Name : The remote openSUSE host is missing a security update. File : suse_11_0_libpoppler-devel-091223.nasl - Type : ACT_GATHER_INFO
2010-01-03	Name : The remote openSUSE host is missing a security update. File : suse_11_1_libpoppler-devel-091222.nasl - Type : ACT_GATHER_INFO
2010-01-03	Name : The remote SuSE system is missing a security patch for libpoppler-devel File : suse_11_2_libpoppler-devel-091222.nasl - Type : ACT_GATHER_INFO
2010-01-03	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libpoppler-devel-091221.nasl - Type : ACT_GATHER_INFO
2010-01-03	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_poppler-6751.nasl - Type : ACT_GATHER_INFO
2009-12-30	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-346.nasl - Type : ACT_GATHER_INFO
2009-11-16	Name : The remote openSUSE host is missing a security update. File : suse_11_0_kdegraphics3-pdf-091110.nasl - Type : ACT_GATHER_INFO
2009-11-16	Name : The remote openSUSE host is missing a security update. File : suse_11_1_kdegraphics3-pdf-091110.nasl - Type : ACT_GATHER_INFO
2009-11-16	Name : The remote openSUSE host is missing a security update. File : suse_cups-6565.nasl - Type : ACT_GATHER_INFO
2009-11-16	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_kdegraphics3-pdf-6653.nasl - Type : ACT_GATHER_INFO
2009-11-13	Name : The remote Fedora host is missing a security update. File : fedora_2009-10730.nasl - Type : ACT_GATHER_INFO
2009-11-13	Name : The remote Fedora host is missing a security update. File : fedora_2009-10857.nasl - Type : ACT_GATHER_INFO
2009-11-09	Name : The remote openSUSE host is missing a security update. File : suse_11_0_xpdf-091023.nasl - Type : ACT_GATHER_INFO
2009-11-09	Name : The remote openSUSE host is missing a security update. File : suse_11_1_xpdf-091024.nasl - Type : ACT_GATHER_INFO
2009-11-09	Name : The remote openSUSE host is missing a security update. File : suse_xpdf-6558.nasl - Type : ACT_GATHER_INFO
2009-11-06	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_xpdf-6556.nasl - Type : ACT_GATHER_INFO
2009-11-03	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-850-3.nasl - Type : ACT_GATHER_INFO
2009-10-29	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2009-302-01.nasl - Type : ACT_GATHER_INFO
2009-10-29	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2009-302-02.nasl - Type : ACT_GATHER_INFO
2009-10-28	Name : The remote Fedora host is missing a security update. File : fedora_2009-10823.nasl - Type : ACT_GATHER_INFO
2009-10-28	Name : The remote Fedora host is missing a security update. File : fedora_2009-10845.nasl - Type : ACT_GATHER_INFO
2009-10-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-287.nasl - Type : ACT_GATHER_INFO
2009-10-22	Name : The remote Fedora host is missing a security update. File : fedora_2009-10648.nasl - Type : ACT_GATHER_INFO
2009-10-22	Name : The remote Fedora host is missing a security update. File : fedora_2009-10694.nasl - Type : ACT_GATHER_INFO
2009-10-22	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-850-1.nasl - Type : ACT_GATHER_INFO
2009-10-20	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-282.nasl - Type : ACT_GATHER_INFO
2009-10-16	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2009-1501.nasl - Type : ACT_GATHER_INFO
2009-10-16	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1502.nasl - Type : ACT_GATHER_INFO
2009-10-16	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2009-1503.nasl - Type : ACT_GATHER_INFO
2009-10-16	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1504.nasl - Type : ACT_GATHER_INFO
2009-10-16	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1512.nasl - Type : ACT_GATHER_INFO
2009-10-16	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1513.nasl - Type : ACT_GATHER_INFO
2009-10-06	Name : The remote openSUSE host is missing a security update. File : suse_poppler-6319.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12396.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 11 host is missing a security update. File : suse_11_libpoppler4-090622.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_cups-6174.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_kdegraphics3-6283.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_poppler-6315.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_xpdf-6177.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_0_kdegraphics3-090423.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_0_libpoppler3-090611.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_0_xpdf-090417.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_1_kdegraphics3-090424.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_1_libpoppler4-090622.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_1_xpdf-090416.nasl - Type : ACT_GATHER_INFO
2009-07-17	Name : The remote Fedora host is missing a security update. File : fedora_2009-6972.nasl - Type : ACT_GATHER_INFO
2009-06-28	Name : The remote Fedora host is missing a security update. File : fedora_2009-6973.nasl - Type : ACT_GATHER_INFO
2009-06-28	Name : The remote Fedora host is missing a security update. File : fedora_2009-6982.nasl - Type : ACT_GATHER_INFO
2009-05-26	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-0429.nasl - Type : ACT_GATHER_INFO
2009-05-26	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-0431.nasl - Type : ACT_GATHER_INFO
2009-05-26	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2009-0458.nasl - Type : ACT_GATHER_INFO
2009-05-14	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-0480.nasl - Type : ACT_GATHER_INFO
2009-05-13	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_10_5_7.nasl - Type : ACT_GATHER_INFO
2009-05-13	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_SecUpd2009-002.nasl - Type : ACT_GATHER_INFO
2009-05-11	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2009-129-01.nasl - Type : ACT_GATHER_INFO
2009-05-08	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1793.nasl - Type : ACT_GATHER_INFO
2009-05-08	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_736e55bc39bb11dea493001b77d09812.nasl - Type : ACT_GATHER_INFO
2009-05-06	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1790.nasl - Type : ACT_GATHER_INFO
2009-05-01	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2009-0458.nasl - Type : ACT_GATHER_INFO
2009-04-30	Name : The remote openSUSE host is missing a security update. File : suse_kdegraphics3-6211.nasl - Type : ACT_GATHER_INFO
2009-04-29	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-101.nasl - Type : ACT_GATHER_INFO
2009-04-27	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2009-116-01.nasl - Type : ACT_GATHER_INFO
2009-04-27	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200904-20.nasl - Type : ACT_GATHER_INFO
2009-04-27	Name : The remote openSUSE host is missing a security update. File : suse_xpdf-6182.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Fedora host is missing a security update. File : fedora_2009-3769.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Fedora host is missing a security update. File : fedora_2009-3820.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote openSUSE host is missing a security update. File : suse_cups-6172.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-759-1.nasl - Type : ACT_GATHER_INFO
2009-04-22	Name : The remote Fedora host is missing a security update. File : fedora_2009-3753.nasl - Type : ACT_GATHER_INFO
2009-04-22	Name : The remote Fedora host is missing a security update. File : fedora_2009-3794.nasl - Type : ACT_GATHER_INFO
2009-04-21	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2009-0430.nasl - Type : ACT_GATHER_INFO
2009-04-21	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_a21037d52c3811deab3b0017a4cccfc6.nasl - Type : ACT_GATHER_INFO
2009-04-17	Name : The remote printer service is affected by multiple vulnerabilities. File : cups_1_3_10.nasl - Type : ACT_GATHER_INFO
2009-04-17	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-0429.nasl - Type : ACT_GATHER_INFO
2009-04-17	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2009-0430.nasl - Type : ACT_GATHER_INFO
2009-04-17	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-0431.nasl - Type : ACT_GATHER_INFO

Global Informations

Type	Count
CWE ID(s)	10
Oval ID(s)	16
CPE ID(s)	195
osvdb(s)	13
Openvas Exploit(s)	115
Snort® Rule(s)	3
Nessus® Exploit(s)	146

	Related
9.3	CVE-2009-3608
6.8	CVE-2010-1440
6.8	CVE-2010-0827
6.8	CVE-2010-0739
6.8	CVE-2009-0195
5	CVE-2009-1284
4.3	CVE-2010-0829
4.3	CVE-2009-0166
4.3	CVE-2009-0147
4.3	CVE-2009-0146
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 10 more Alert(s)