Red Hat Security Advisory

RHSA-2007:1030

xpdf security update

Released 2007-11-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Desktop version 3 xpdf-1:2.02-11.el3, xpdf-1:2.02-11.el3.i386
Red Hat Enterprise Linux AS version 3 xpdf-1:2.02-11.el3, xpdf-1:2.02-11.el3.i386, xpdf-1:2.02-11.el3.ia64 +1
Red Hat Enterprise Linux ES version 3 xpdf-1:2.02-11.el3, xpdf-1:2.02-11.el3.i386, xpdf-1:2.02-11.el3.ia64
Red Hat Enterprise Linux WS version 3 xpdf-1:2.02-11.el3, xpdf-1:2.02-11.el3.i386, xpdf-1:2.02-11.el3.ia64

Fixes 4 records

TI-2007-03903 CVE-2007-4033 · GHSA-5vjf-7425-428p

Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib…

MEDIUM 51

Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.18661 Published 2007-07-27 Fixed CWE-119

TI-2007-05180 CVE-2007-5393 · GHSA-jvj2-mwv2-mvpr

Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in…

MEDIUM 49

Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06408 Published 2007-11-08 Fixed CWE-119

TI-2007-05179 CVE-2007-5392 · GHSA-5wjr-7h39-qr5r

Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows…

MEDIUM 49

Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06408 Published 2007-11-08 Fixed CWE-119

TI-2007-04212 CVE-2007-4352 · GHSA-7x5f-fvjf-pxrp

Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in…

MEDIUM 43

Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruptio…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.0702 Published 2007-11-08 Fixed