xpdf: integer overflows [LWN.net]

Package(s):

xpdf, poppler, cupsys, tetex-bin

CVE #(s):

CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627

Created:

January 5, 2006

Updated:

November 30, 2006

Description:

xpdf has a number of integer overflows. A remote attacker can trick a user into opening a maliciously crafted pdf file, allowing the attacker to execute code with the privileges of the local user. This also affects the Poppler library, cupsys and tetex-bin.

Alerts:

Fedora	FEDORA-2006-1220	2006-11-30
Debian	DSA-932-1	2006-01-09
Debian	DSA-931-1	2006-01-09
Ubuntu	USN-236-2	2006-01-09
Mandriva	MDKSA-2006:008	2006-01-06
Mandriva	MDKSA-2006:006	2006-01-05
Mandriva	MDKSA-2006:005	2006-01-05
Mandriva	MDKSA-2006:004	2006-01-05
Mandriva	MDKSA-2006:003	2006-01-05
Ubuntu	USN-236-1	2006-01-05

(Log in to post comments)