Red Hat Security AdvisoryRHSA-2007:1027
tetex security update
Released 2007-11-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) tetex-3.0-33.2.el5_1.2, tetex-3.0-33.2.el5_1.2.i386, tetex-3.0-33.2.el5_1.2.ia64 +25
- Red Hat Enterprise Linux AS version 4 tetex-2.0.2-22.0.1.EL4.10, tetex-2.0.2-22.0.1.EL4.10.i386, tetex-2.0.2-22.0.1.EL4.10.ia64 +25
- Red Hat Enterprise Linux Desktop (v. 5 client) tetex-3.0-33.2.el5_1.2, tetex-3.0-33.2.el5_1.2.i386, tetex-afm-3.0-33.2.el5_1.2 +11
- Red Hat Enterprise Linux Desktop version 4 tetex-2.0.2-22.0.1.EL4.10, tetex-2.0.2-22.0.1.EL4.10.i386, tetex-afm-2.0.2-22.0.1.EL4.10 +11
- Red Hat Enterprise Linux ES version 4 tetex-2.0.2-22.0.1.EL4.10, tetex-2.0.2-22.0.1.EL4.10.i386, tetex-2.0.2-22.0.1.EL4.10.ia64 +18
- Red Hat Enterprise Linux WS version 4 tetex-2.0.2-22.0.1.EL4.10, tetex-2.0.2-22.0.1.EL4.10.i386, tetex-2.0.2-22.0.1.EL4.10.ia64 +18
Fixes 4 records
Priority MEDIUM 51
Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.18661 · Published 2007-07-27 · Fixed CWE-119
Priority MEDIUM 49
Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06408 · Published 2007-11-08 · Fixed CWE-119
Priority MEDIUM 49
Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06408 · Published 2007-11-08 · Fixed CWE-119
Priority MEDIUM 43
Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruptio…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.0702 · Published 2007-11-08 · Fixed
THREATIST.IORead the docs