Red Hat Security AdvisoryRHSA-2007:1025
gpdf security update
Released 2007-11-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 gpdf-2.8.2-7.7.1, gpdf-2.8.2-7.7.1.i386, gpdf-2.8.2-7.7.1.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 gpdf-2.8.2-7.7.1, gpdf-2.8.2-7.7.1.i386
- Red Hat Enterprise Linux ES version 4 gpdf-2.8.2-7.7.1, gpdf-2.8.2-7.7.1.i386, gpdf-2.8.2-7.7.1.ia64
- Red Hat Enterprise Linux WS version 4 gpdf-2.8.2-7.7.1, gpdf-2.8.2-7.7.1.i386, gpdf-2.8.2-7.7.1.ia64
Fixes 3 records
Priority MEDIUM 49
Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06408 · Published 2007-11-08 · Fixed CWE-119
Priority MEDIUM 49
Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06408 · Published 2007-11-08 · Fixed CWE-119
Priority MEDIUM 43
Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruptio…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.0702 · Published 2007-11-08 · Fixed
THREATIST.IORead the docs