Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 486
Alerts This Week
Warning Icon 1 486

Gentoo: GLSA 200807-04 Normal: Poppler Code Execution Risk

gentoo
Calendar Grey July 8, 2008
Dist Gentoo Esm H88
Gentoo GLSA 202109-12 discloses a vulnerability in Poppler enabling potential code execution. Users are urged to upgrade to prevent risks from social engineering attempts.
Poppler is affected by a memory management issue, which could lead to the execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200807-04 https://security.gentoo.org/ Severity: Normal Title: Poppler: User-assisted execution of arbitrary code Date: July 08, 2008 Bugs: #229931 ID: 200807-04

Synopsis ======= Poppler is affected by a memory management issue, which could lead to the execution of arbitrary code.
Background ========= Poppler is a cross-platform PDF rendering library originally based on Xpdf.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-text/poppler < 0.6.3-r1 >= 0.6.3-r1
========== Felipe Andres Manzano reported a memory management issue in the Page class constructor/destructor.
Impact ===== A remote attacker could entice ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo arbitrary code execution memory management poppler normal severity

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo arbitrary code execution memory management poppler normal severity

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround