Debian Bug report logs -
#342286
gpdf: source taken from xpdf may introduce heap-overflow vulnerabilities
Package:
gpdf;
Maintainer for gpdf is (unknown);
Reported by: Paul Szabo <psz@mathsusydeduau>
Date: Tue, 6 Dec 2005 19:48:06 UTC
Severity: grave
Fixed in version gpdf/2100-2
Done: Filip Van Raemdonck <mecha ...
infamous41md discovered several integer overflows in the XPDF code,
which is present in xpdf, the Poppler library, tetex-bin, KOffice, and
kpdf By tricking an user into opening a specially crafted PDF file,
an attacker could exploit this to execute arbitrary code with the
privileges of the application that processes the document ...
Synopsis
tetex security update
Type/Severity
Security Advisory: Moderate
Topic
Updated tetex packages that fix several integer overflows are now availableThis update has been rated as having moderate security impact by the RedHat Security Response Team
Description
TeTeX is an implementati ...
Synopsis
xpdf security update
Type/Severity
Security Advisory: Important
Topic
An updated xpdf package that fixes several security issues is now availableThis update has been rated as having important security impact by the RedHat Security Response Team[Updated 20 Dec 2005]The initial fix for these issues ...
Synopsis
gpdf security update
Type/Severity
Security Advisory: Important
Topic
An updated gpdf package that fixes several security issues is now availablefor Red Hat Enterprise Linux 4This update has been rated as having important security impact by the RedHat Security Response Team
Description
...
Synopsis
kdegraphics security update
Type/Severity
Security Advisory: Important
Topic
Updated kdegraphics packages that resolve several security issues in kpdfare now availableThis update has been rated as having important security impact by the RedHat Security Response Team
Description
T ...
Synopsis
cups security update
Type/Severity
Security Advisory: Important
Topic
Updated CUPS packages that fix multiple security issues are now availablefor Red Hat Enterprise LinuxThis update has been rated as having important security impact by the RedHat Security Response Team
Description
...
"infamous41md" and Chris Evans discovered several heap based buffer
overflows in xpdf, the Portable Document Format (PDF) suite, which is
also present in gpdf, the GNOME version of the Portable Document
Format viewer, and which can lead to a denial of service by crashing
the application or possibly to the execution of arbitrary code
The old stable ...
"infamous41md" and Chris Evans discovered several heap based buffer
overflows in xpdf, the Portable Document Format (PDF) suite, that can
lead to a denial of service by crashing the application or possibly to
the execution of arbitrary code
For the old stable distribution (woody) these problems have been fixed in
version 100-38
For the stable d ...
"infamous41md" and Chris Evans discovered several heap based buffer
overflows in xpdf which are also present in pdftohtml, a utility that
translates PDF documents into HTML format, and which can lead to a
denial of service by crashing the application or possibly to the
execution of arbitrary code
The old stable distribution (woody) does not contai ...
"infamous41md" and Chris Evans discovered several heap based buffer
overflows in xpdf which are also present in pdfkitframework, the
GNUstep framework for rendering PDF content, and which can lead to a
denial of service by crashing the application or possibly to the
execution of arbitrary code
The old stable distribution (woody) does not contain ...
"infamous41md" and Chris Evans discovered several heap based buffer
overflows in xpdf which are also present in CUPS, the Common UNIX
Printing System, and which can lead to a denial of service by crashing
the application or possibly to the execution of arbitrary code
For the old stable distribution (woody) these problems have been fixed in
version ...
"infamous41md" and chris Evans discovered several heap based buffer
overflows in xpdf, the Portable Document Format (PDF) suite, which is
also present in koffice, the KDE Office Suite, and which can lead to a
denial of service by crashing the application or possibly to the
execution of arbitrary code
The old stable distribution (woody) does not co ...
Vulmon