Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Gentoo: GLSA 200709-12 Normal: Poppler Buffer Overflow Information

gentoo
Calendar Grey September 19, 2007
Scroller Gentoo
Recent vulnerabilities in Poppler on Gentoo involve two significant buffer overflow flaws, posing a risk for arbitrary code execution. An immediate update is advised.
Poppler is vulnerable to an integer overflow and a stack overflow.

Summary

Gentoo Linux Security Advisory GLSA 200709-12 https://security.gentoo.org/ Severity: Normal Title: Poppler: Two buffer overflow vulnerabilities Date: September 19, 2007 Bugs: #188863 ID: 200709-12

Synopsis ======= Poppler is vulnerable to an integer overflow and a stack overflow.
Background ========= Poppler is a cross-platform PDF rendering library originally based on Xpdf.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-text/poppler < 0.5.4-r2 >= 0.5.4-r2
========== Poppler and Xpdf are vulnerable to an integer overflow in the StreamPredictor::StreamPredictor function, and a stack overflow in the StreamPredictor::getNextLine function. The original vulne...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory Gentoo buffer overflow software update exploitation attack vector Poppler

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory Gentoo buffer overflow software update exploitation attack vector Poppler

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround