Stay Secure with the Latest Linux Advisories

security advisorycritical issuebuffer overflow

Fedora Core 3: FEDORA-2004-574 Important: xpdf Buffer Overflow

This package fixes a buffer overflow which allows attackers to cause the xpdf application to crash, and possibly to execute arbitrary code. The Common Vulnerabilities and Exposures projects (cve.mitre.org) has assigned the name CAN-2004-1125 to this issue.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2004-573 2004-12-22 ---------------------------------------------------------------------Product : Fedora Core 3 Name : xpdf Version : 3.00 Release : 10.1 Summary : A PDF file viewer for the X Window System. Description : Xpdf is an X Window System based viewer for Portable Document Format (PDF) files. Xpdf is a small and efficient program which uses standard X fonts. ---------------------------------------------------------------------Update Information: This package fixes a buffer overflow which allows attackers to cause the xpdf application to crash, and possibly to execute arbitrary code. The Common Vulnerabilities and Exposures projects (cve.mitre.org) has assigned the name CAN-2004-1125 to this issue. ---------------------------------------------------------------------* Wed Dec 22 2004 Tim Waugh 1:3.00-10.1 - Applied patch to fix CAN-2004-1125 (bug #143500). ---------------------------------------------------------------------This update can be downloaded from: adb7520d574883b3aa53c7039beed853 SRPMS/xpdf-3.00-10.1.src.rpm 0557f1caa236f794d9f71fa31a16ab9f x86_64/xpdf-3.00-10.1.x86_64.rpm abc2e6776d3999cd886858f77eef7112 x86_64/debug/xpdf-debuginfo-3.00-10.1.x86_64.rpm 110b6b2768f35612db180f31a6db554a i386/xpdf-3.00-10.1.i386.rpm 73fc71cb08839a3e4ef2debc0f637591 i386/debug/xpdf-debuginfo-3.00-10.1.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. --------------------------------------------------------------------- . Resolves memory allocation vulnerability in xpdf that could lead to systemfailures or unauthorized code execution on Fedora Core 3. Comprehensive information included.. Fedora Update,xpdf application,critical buffer issue,security patch. . Severity: Important. LinuxSecurity.com Team

Dec 27, 2004 •Important Fedora