LWN.net Logo

poppler: arbitrary code execution

Package(s):poppler CVE #(s):CVE-2005-3191 CAN-2005-3193
Created:December 8, 2005 Updated:January 16, 2006
Description: The poppler PDF rendering library has a heap overflow vulnerability that can be exploited by viewing specially crafted PDF files. An attacker can cause a crash or the execution of arbitrary code. This vulnerability is related to a similar vulnerability with xpdf.
Alerts:
Fedora FEDORA-2005-037 2006-01-16
Red Hat RHSA-2005:878-01 2005-12-20
Red Hat RHSA-2005:868-01 2005-12-20
Fedora FEDORA-2005-1171 2005-12-19
Fedora FEDORA-2005-1132 2005-12-08

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds