Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Scientific Linux: Important Gpdf Update SL4.x i386/x86_64

Calendar Nov 07, 2007 • User Avatar LinuxSecurity Advisories
1 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory security issue code execution gpdf important update malicious PDF Scientific Linux
Important: gpdf security update 
Date:         Wed, 7 Nov 2007 17:14:47 -0600
Reply-To:     Connie Sieh 
Sender:       Security Errata for Scientific Linux
              
From:         Connie Sieh 
Subject:      Security ERRATA for gpdf on SL4.x i386/x86_64
Comments: To: scientific 

Synopsis:          Important: gpdf security update

CVE Names:         CVE-2007-4352
                    CVE-2007-5392
                    CVE-2007-5393

Problem description:

Alin Rad Pop discovered several flaws in the handling of PDF files. An
attacker could create a malicious PDF file that would cause gpdf to crash,
or potentially execute arbitrary code when opened.
(CVE-2007-4352, CVE-2007-5392, CVE-2007-5393)

SL4.x

SRPMS:
 	gpdf-2.8.2-7.7.1.src.rpm

i386:
 	gpdf-2.8.2-7.7.1.i386.rpm

x86_64:
 	gpdf-2.8.2-7.7.1.x86_64.rpm

-Connie Sieh
-Troy Dawson