Fedora Core 2: FEDORA-2004-572 Critical: xpdf Buffer Overflow

Xpdf is an X Window System based viewer for Portable Document Format

(PDF) files. Xpdf is a small and efficient program which uses

standard X fonts.

This package fixes a buffer overflow which allows attackers to cause the

xpdf application to crash, and possibly to execute arbitrary code. The

Common Vulnerabilities and Exposures projects (cve.mitre.org) has assigned

the name CAN-2004-1125 to this issue.

- Applied patch to fix CAN-2004-1125 (bug #143500).

917422b5087ab12727223d4e570ade55 SRPMS/xpdf-3.00-3.6.src.rpm

293af32ed4f834a436dcdd1ddf7eab1b x86_64/xpdf-3.00-3.6.x86_64.rpm

ff615294add6b4b8de966ff09168cfd9 x86_64/debug/xpdf-debuginfo-3.00-3.6.x86_64.rpm

2c70874a77f954e1de778457d4889154 i386/xpdf-3.00-3.6.i386.rpm

3222f6518777a6dcef53714a0b050c6d i386/debug/xpdf-debuginfo-3.00-3.6.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.