Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

Gentoo GLSA 200711-22 Normal: Poppler & KDE Code Execution Risk

gentoo
Calendar Grey November 18, 2007
Scroller Gentoo
An official warning for Gentoo emphasizes vulnerabilities in FontConfig and Plasma that may result in potential exploits affecting system security.
Poppler and various KDE components are vulnerable to multiple memory management issues possibly resulting in the execution of arbitrary code

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200711-22
                                            https://security.gentoo.org/

  Severity: Normal
     Title: Poppler, KDE: User-assisted execution of arbitrary code
      Date: November 18, 2007
      Bugs: #196735, #198409
        ID: 200711-22


Synopsis
=======
Poppler and various KDE components are vulnerable to multiple memory
management issues possibly resulting in the execution of arbitrary
code.

Background
=========
Poppler is a cross-platform PDF rendering library originally based on
Xpdf. KOffice is an integrated office suite for KDE. KWord is the
KOffice word processor. KPDF is a KDE-based PDF viewer included in the
kdegraphics package.

...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory gentoo code execution kde poppler normal memory issues

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo code execution kde poppler normal memory issues

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround