Red Hat Security AdvisoryRHSA-2007:1021
cups security update
Released 2007-11-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) cups-1:1.2.4-11.14.el5_1.3, cups-1:1.2.4-11.14.el5_1.3.i386, cups-1:1.2.4-11.14.el5_1.3.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) cups-1:1.2.4-11.14.el5_1.3, cups-1:1.2.4-11.14.el5_1.3.i386, cups-libs-1:1.2.4-11.14.el5_1.3 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) cups-1:1.2.4-11.14.el5_1.3, cups-devel-1:1.2.4-11.14.el5_1.3, cups-devel-1:1.2.4-11.14.el5_1.3.i386
Fixes 3 records
Priority MEDIUM 49
Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06408 · Published 2007-11-08 · Fixed CWE-119
Priority MEDIUM 49
Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06408 · Published 2007-11-08 · Fixed CWE-119
Priority MEDIUM 43
Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruptio…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.0702 · Published 2007-11-08 · Fixed
THREATIST.IORead the docs