Red Hat Security AdvisoryRHSA-2007:1024
kdegraphics security update
Released 2007-11-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 kdegraphics-7:3.3.1-6.el4_5, kdegraphics-7:3.3.1-6.el4_5.i386, kdegraphics-7:3.3.1-6.el4_5.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 kdegraphics-7:3.3.1-6.el4_5, kdegraphics-7:3.3.1-6.el4_5.i386, kdegraphics-devel-7:3.3.1-6.el4_5 +1
- Red Hat Enterprise Linux ES version 4 kdegraphics-7:3.3.1-6.el4_5, kdegraphics-7:3.3.1-6.el4_5.i386, kdegraphics-7:3.3.1-6.el4_5.ia64 +3
- Red Hat Enterprise Linux WS version 4 kdegraphics-7:3.3.1-6.el4_5, kdegraphics-7:3.3.1-6.el4_5.i386, kdegraphics-7:3.3.1-6.el4_5.ia64 +3
Fixes 3 records
Priority MEDIUM 49
Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06408 · Published 2007-11-08 · Fixed CWE-119
Priority MEDIUM 49
Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06408 · Published 2007-11-08 · Fixed CWE-119
Priority MEDIUM 43
Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruptio…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.0702 · Published 2007-11-08 · Fixed
THREATIST.IORead the docs