Red Hat Security AdvisoryRHSA-2007:1026
poppler security update
Released 2007-11-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) poppler-0.5.4-4.3.el5_1, poppler-0.5.4-4.3.el5_1.i386, poppler-0.5.4-4.3.el5_1.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) poppler-0.5.4-4.3.el5_1, poppler-0.5.4-4.3.el5_1.i386, poppler-utils-0.5.4-4.3.el5_1 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) poppler-0.5.4-4.3.el5_1, poppler-devel-0.5.4-4.3.el5_1, poppler-devel-0.5.4-4.3.el5_1.i386
Fixes 3 records
Priority MEDIUM 49
Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06408 · Published 2007-11-08 · Fixed CWE-119
Priority MEDIUM 49
Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06408 · Published 2007-11-08 · Fixed CWE-119
Priority MEDIUM 43
Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruptio…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.0702 · Published 2007-11-08 · Fixed
THREATIST.IORead the docs