Red Hat Security AdvisoryRHSA-2007:1031
xpdf security update
Released 2007-11-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 xpdf-1:0.92-19.el2, xpdf-1:0.92-19.el2.i386, xpdf-1:0.92-19.el2.ia64
- Red Hat Enterprise Linux ES version 2.1 xpdf-1:0.92-19.el2, xpdf-1:0.92-19.el2.i386
- Red Hat Enterprise Linux WS version 2.1 xpdf-1:0.92-19.el2, xpdf-1:0.92-19.el2.i386
- Red Hat Linux Advanced Workstation 2.1 xpdf-1:0.92-19.el2, xpdf-1:0.92-19.el2.ia64
Fixes 2 records
Priority MEDIUM 51
Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.18661 · Published 2007-07-27 · Fixed CWE-119
Priority MEDIUM 49
Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06408 · Published 2007-11-08 · Fixed CWE-119
