Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Debian: DSA-1790-1 Critical: xpdf Remote Code Execution

debian
Calendar Grey May 5, 2009
Debian Logo
Numerous vulnerabilities in xpdf resolved in the Debian notice DSA-1790-1, enhance the security of PDF document viewing.
Several vulnerabilities have been identified in xpdf, a suite of tools for viewing and converting Portable Document Format (PDF) files
Topics%20covered

Topics Covered

security advisory denial of service buffer overflow critical remote code execution debian xpdf

Summary

The Common Vulnerabilities and Exposures project identifies the
following problems:

CVE-2009-0146

Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and
earlier, CUPS 1.3.9 and earlier, and other products allow remote
attackers to cause a denial of service (crash) via a crafted PDF file,
related to (1) JBIG2SymbolDict::setBitmap and (2)
JBIG2Stream::readSymbolDictSeg.

CVE-2009-0147

Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and
earlier, CUPS 1.3.9 and earlier, and other products allow remote
attackers to cause a denial of service (crash) via a crafted PDF file,
related to (1) JBIG2Stream::readSymbolDictSeg, (2)
JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.

CVE-2009-0165

Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as
used in Poppler and other products, when running on Mac OS X, has
unspecified impact, related to "g*allocn."

CVE-2009-0166

The JBIG2 decoder in Xpdf 3.0...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow critical remote code execution debian xpdf

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here