Scientific Linux: CVE-2008-1693 Critical: gpdf Malicious PDF Issue

Date: Fri, 9 May 2008 17:02:30 -0500
Reply-To: Connie Sieh 
Sender: Security Errata for Scientific Linux
 
From: Connie Sieh 
Subject: Security ERRATA for gpdf on SL4.x i386/x86_64
Comments: To: scientific 

Synopsis: Important: gpdf security update
CVE Names: CVE-2008-1693

A flaw was discovered in the way gpdf displayed malformed fonts
embedded in PDF files. An attacker could create a malicious PDF file that
would cause gpdf to crash, or, potentially, execute arbitrary code when
opened. (CVE-2008-1693)

SRPM:
 	gpdf-2.8.2-7.7.2.src.rpm

i386:
 	gpdf-2.8.2-7.7.2.i386.rpm

x86_64:

 	gpdf-2.8.2-7.7.2.x86_64.rpm