XPDF DCTStream Progressive Remote Heap Buffer Overflow Vulnerability
BID:15726
Info
XPDF DCTStream Progressive Remote Heap Buffer Overflow Vulnerability
| Bugtraq ID: | 15726 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2005-3191 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 06 2005 12:00AM |
| Updated: | Aug 10 2007 07:44PM |
| Credit: | This vulnerability was discovered by [email protected]. |
| Vulnerable: |
Xpdf Xpdf 3.0 pl3 Xpdf Xpdf 3.0 pl2 Xpdf Xpdf 3.0 1 Xpdf Xpdf 3.0 0 Xpdf Xpdf 2.0 3 Xpdf Xpdf 2.0 2 Xpdf Xpdf 2.0 1 Xpdf Xpdf 2.0 Xpdf Xpdf 1.0 1 Xpdf Xpdf 1.0 0a Xpdf Xpdf 1.0 0 Xpdf Xpdf 0.93 Xpdf Xpdf 0.92 Xpdf Xpdf 0.91 Xpdf Xpdf 0.90 Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Turbolinux Turbolinux Workstation 8.0 Turbolinux Turbolinux Server 10.0 x86 Turbolinux Turbolinux Server 10.0 Turbolinux Turbolinux Server 8.0 Turbolinux Turbolinux Desktop 10.0 Turbolinux Turbolinux FUJI Turbolinux Turbolinux 10 F... TurboLinux Personal TurboLinux Multimedia Turbolinux Home Turbolinux Appliance Server Workgroup Edition 1.0 Turbolinux Appliance Server Hosting Edition 1.0 Turbolinux Appliance Server 1.0 Workgroup Edition Turbolinux Appliance Server 1.0 Hosting Edition Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 Trustix Secure Enterprise Linux 2.0 Trend Micro InterScan VirusWall 8.0 TransSoft Broker FTP Server 8.0 teTeX teTeX 3.0 teTeX teTeX 2.0.2 teTeX teTeX 2.0.1 teTeX teTeX 2.0 teTeX teTeX 1.0.7 SuSE SUSE Linux Enterprise Server 8 SuSE Linux Enterprise Server 9 SuSE Linux Desktop 1.0 Sun Solaris 10_x86 Sun Solaris 10.0_x86 Sun Solaris 10.0 Sun Solaris 10 Slackware Linux 10.2 Slackware Linux 10.1 Slackware Linux 10.0 Slackware Linux 9.1 Slackware Linux 9.0 Slackware Linux -current SGI ProPack 3.0 SP6 SCO Unixware 7.1.4 SCO Open Server 6.0 SCO Open Server 5.0.7 S.u.S.E. UnitedLinux 1.0 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SUSE LINUX Retail Solution 8.0 S.u.S.E. SuSE Linux Openexchange Server 4.0 S.u.S.E. Open-Enterprise-Server 9.0 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 9.1 x86_64 S.u.S.E. Linux Professional 9.1 S.u.S.E. Linux Professional 9.0 x86_64 S.u.S.E. Linux Professional 9.0 S.u.S.E. Linux Professional 8.2 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 8.2 S.u.S.E. Linux Enterprise Server for S/390 9.0 S.u.S.E. Linux Enterprise Server for S/390 S.u.S.E. Linux Database Server 0 S.u.S.E. Linux Connectivity Server rPath rPath Linux 1 Redhat Linux 9.0 i386 Redhat Linux 7.3 i386 Redhat Fedora Core4 Redhat Fedora Core3 Redhat Fedora Core2 Redhat Fedora Core1 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux WS 2.1 IA64 Redhat Enterprise Linux WS 2.1 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux ES 2.1 IA64 Redhat Enterprise Linux ES 2.1 Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Enterprise Linux AS 2.1 IA64 Redhat Enterprise Linux AS 2.1 Redhat Desktop 4.0 Redhat Desktop 3.0 Redhat Advanced Workstation for the Itanium Processor 2.1 IA64 Redhat Advanced Workstation for the Itanium Processor 2.1 Poppler poppler 0.4.2 PDFTOHTML PDFTOHTML 0.36 PDFTOHTML PDFTOHTML 0.35 PDFTOHTML PDFTOHTML 0.34 PDFTOHTML PDFTOHTML 0.33 a PDFTOHTML PDFTOHTML 0.33 PDFTOHTML PDFTOHTML 0.32 b PDFTOHTML PDFTOHTML 0.32 a Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 Mandriva Linux Mandrake 10.2 x86_64 Mandriva Linux Mandrake 10.2 Mandriva Linux Mandrake 10.1 x86_64 Mandriva Linux Mandrake 10.1 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft Corporate Server 2.1 KDE kpdf 0.5 KDE KOffice 1.4.2 KDE KOffice 1.4.1 KDE KOffice 1.4 KDE KOffice 1.3.5 KDE KOffice 1.3.4 KDE KOffice 1.3.3 KDE KOffice 1.3.2 KDE KOffice 1.3.1 KDE KOffice 1.3 beta3 KDE KOffice 1.3 beta2 KDE KOffice 1.3 beta1 KDE KOffice 1.3 KDE kdegraphics 3.4.2 KDE kdegraphics 3.3 KDE kdegraphics 3.2.1 KDE KDE 3.5 KDE KDE 3.4.3 KDE KDE 3.4.2 KDE KDE 3.4.1 KDE KDE 3.4 KDE KDE 3.3.2 KDE KDE 3.3.2 KDE KDE 3.3.1 KDE KDE 3.3 KDE KDE 3.2.3 KDE KDE 3.2.2 KDE KDE 3.2.1 KDE KDE 3.2 GNOME GPdf 2.8.3 GNOME GPdf 2.8.2 GNOME GPdf 2.1 Gentoo Linux Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia-64 Debian Linux 3.0 ia-32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0 Avaya Interactive Response 2.0 |
| Not Vulnerable: |
Xpdf Xpdf 3.0 1pl1 |
Discussion
XPDF DCTStream Progressive Remote Heap Buffer Overflow Vulnerability
The 'xpdf' utility is reported prone to a remote buffer-overflow vulnerability. This issue exists because the application fails to perform proper boundary checks before copying user-supplied data into process buffers. A remote attacker may execute arbitrary code in the context of a user running the application. As a result, the attacker can gain unauthorized access to the vulnerable computer.
Reportedly, this issue presents itself in the 'DCTStream::readProgressiveSOF' function residing in the 'xpdf/Stream.cc' file.
This issue is reported to affect xpdf 3.01, but earlier versions are likely vulnerable as well. Applications using embedded xpdf code may also be vulnerable.
The 'pdftohtml' utility also includes vulnerable versions of xpdf. This issue affects pdftohtml 0.36; earlier versions may also be affected.
Th 'kpdf' utility reportedly incorporates vulnerable xpdf code. This issue affects kpdf 0.5; other versions may also be affected.
The 'xpdf' utility is reported prone to a remote buffer-overflow vulnerability. This issue exists because the application fails to perform proper boundary checks before copying user-supplied data into process buffers. A remote attacker may execute arbitrary code in the context of a user running the application. As a result, the attacker can gain unauthorized access to the vulnerable computer.
Reportedly, this issue presents itself in the 'DCTStream::readProgressiveSOF' function residing in the 'xpdf/Stream.cc' file.
This issue is reported to affect xpdf 3.01, but earlier versions are likely vulnerable as well. Applications using embedded xpdf code may also be vulnerable.
The 'pdftohtml' utility also includes vulnerable versions of xpdf. This issue affects pdftohtml 0.36; earlier versions may also be affected.
Th 'kpdf' utility reportedly incorporates vulnerable xpdf code. This issue affects kpdf 0.5; other versions may also be affected.
Exploit / POC
XPDF DCTStream Progressive Remote Heap Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
XPDF DCTStream Progressive Remote Heap Buffer Overflow Vulnerability
Solution:
The vendor has released a patch to address this issue. Please see the referenced advisories for more information.
Sun Solaris 10.0
Xpdf Xpdf 0.93
Xpdf Xpdf 1.0 1
Xpdf Xpdf 1.0 0
KDE KOffice 1.3 beta1
KDE KOffice 1.3 beta2
KDE KOffice 1.3.3
KDE KOffice 1.3.5
KDE KOffice 1.4
Xpdf Xpdf 3.0 1
Xpdf Xpdf 3.0 pl2
Xpdf Xpdf 3.0 pl3
KDE KDE 3.2.3
KDE KDE 3.3.2
Solution:
The vendor has released a patch to address this issue. Please see the referenced advisories for more information.
Sun Solaris 10.0
-
Sun 120739-04
SPARC Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -120739-04-1
Xpdf Xpdf 0.93
-
Xpdf xpdf-3.01pl1.patch
ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.01pl1.patch
Xpdf Xpdf 1.0 1
-
Mandriva xpdf-1.01-4.10.C21mdk.i586.rpm
Corporate Server 2.1:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva xpdf-1.01-4.10.C21mdk.x86_64.rpm
Corporate Server 2.1/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Xpdf xpdf-3.01pl1.patch
ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.01pl1.patch
Xpdf Xpdf 1.0 0
-
RedHat xpdf-1.00-7.6.legacy.i386.rpm
Red Hat Linux 7.3:
http://download.fedoralegacy.org/redhat/7.3/updates/i386/xpdf-1.00-7.6 .legacy.i386.rpm -
RedHat xpdf-chinese-simplified-1.00-7.6.legacy.i386.rpm
Red Hat Linux 7.3:
http://download.fedoralegacy.org/redhat/7.3/updates/i386/xpdf-chinese- simplified-1.00-7.6.legacy.i386.rpm -
RedHat xpdf-chinese-traditional-1.00-7.6.legacy.i386.rpm
Red Hat Linux 7.3:
http://download.fedoralegacy.org/redhat/7.3/updates/i386/xpdf-chinese- traditional-1.00-7.6.legacy.i386.rpm -
RedHat xpdf-japanese-1.00-7.6.legacy.i386.rpm
Red Hat Linux 7.3:
http://download.fedoralegacy.org/redhat/7.3/updates/i386/xpdf-japanese -1.00-7.6.legacy.i386.rpm -
RedHat xpdf-korean-1.00-7.6.legacy.i386.rpm
Red Hat Linux 7.3:
http://download.fedoralegacy.org/redhat/7.3/updates/i386/xpdf-korean-1 .00-7.6.legacy.i386.rpm -
Xpdf xpdf-3.01pl1.patch
ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.01pl1.patch
KDE KOffice 1.3 beta1
-
KDE post-1.3-koffice-CAN-2005-3193.diff
ftp://ftp.kde.org/pub/kde/security_patches/post-1.3-koffice-CAN-2005-3 193.diff
KDE KOffice 1.3 beta2
-
KDE post-1.3-koffice-CAN-2005-3193.diff
ftp://ftp.kde.org/pub/kde/security_patches/post-1.3-koffice-CAN-2005-3 193.diff
KDE KOffice 1.3.3
-
KDE post-1.3-koffice-CAN-2005-3193.diff
ftp://ftp.kde.org/pub/kde/security_patches/post-1.3-koffice-CAN-2005-3 193.diff
KDE KOffice 1.3.5
-
koffice-doc-html_1.3.5-2ubuntu1.2_all.deb
Ubuntu 5.04 (Hoary Hedgehog)
http://security.ubuntu.com/ubuntu/pool/universe/k/koffice/koffice-doc- html_1.3.5-2ubuntu1.2_all.deb -
KDE post-1.3-koffice-CAN-2005-3193.diff
ftp://ftp.kde.org/pub/kde/security_patches/post-1.3-koffice-CAN-2005-3 193.diff
KDE KOffice 1.4
-
KDE post-1.3-koffice-CAN-2005-3193.diff
ftp://ftp.kde.org/pub/kde/security_patches/post-1.3-koffice-CAN-2005-3 193.diff
Xpdf Xpdf 3.0 1
-
Mandriva xpdf-3.01-1.1.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva xpdf-3.01-1.1.20060mdk.x86_64.rpm
Mandriva Linux 2006.0/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Slackware xpdf-3.01-i486-3.tgz
Slackware 10.0:
ftp://ftp.slackware.com/pub/slackware/slackware-10.0/patches/packages/ xpdf-3.01-i486-3.tgz -
Slackware xpdf-3.01-i486-3.tgz
Slackware 10.2:
ftp://ftp.slackware.com/pub/slackware/slackware-10.2/patches/packages/ xpdf-3.01-i486-3.tgz -
Slackware xpdf-3.01-i486-3.tgz
Slackware 9.1:
ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/x pdf-3.01-i486-3.tgz -
Slackware xpdf-3.01-i486-3a.tgz
Slackware 10.1:ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/xpdf-3.01-i486-3a.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ xpdf-3.01-i486-3a.tgz -
Xpdf xpdf-3.01pl1.patch
ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.01pl1.patch
Xpdf Xpdf 3.0 pl2
-
Xpdf xpdf-3.01pl1.patch
ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.01pl1.patch
Xpdf Xpdf 3.0 pl3
-
Xpdf xpdf-3.01pl1.patch
ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.01pl1.patch
KDE KDE 3.2.3
-
Conectiva kamera-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kamera-help-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kcoloredit-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kcoloredit-help-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kdegraphics-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kdegraphics-common-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kdegraphics-devel-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kdegraphics-doc-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kdvi-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kdvi-help-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kfax-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kgamma-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kgamma-help-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kghostview-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kghostview-help-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kiconedit-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kiconedit-help-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kmrml-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kolourpaint-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kolourpaint-help-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kooka-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kooka-help-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kpdf-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kpdf-help-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kpovmodeler-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kpovmodeler-help-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kruler-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kruler-help-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva ksnapshot-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva ksnapshot-help-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva ksvg-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kuickshow-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kview-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva kview-help-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
Conectiva libkmultipage0-3.3.2-62084U10_7cl.i386.rpm
Version 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/xpdf-3.01-48231U10_7cl.i38 6.rpm -
KDE post-3.2.3-kdegraphics-CAN-2005-3193.diff
ftp://ftp.kde.org/pub/kde/security_patches/post-3.2.3-kdegraphics-CAN- 2005-3193.diff
KDE KDE 3.3.2
-
KDE post-3.3.2-kdegraphics-CAN-2005-3193.diff
ftp://ftp.kde.org/pub/kde/security_patches/post-3.3.2-kdegraphics-CAN- 2005-3193.diff
References
XPDF DCTStream Progressive Remote Heap Buffer Overflow Vulnerability
References:
References:
- ASA-2007-281 - Multiple Security Vulnerabilities in the Solaris Gnome PDF Viewer (Avaya)
- Bug 313117: gpdf: DoS from XPDF issue (GNOME)
- Debian Bug report logs - #342287 kpdf: source taken from xpdf may introduce heap (Debian)
- Debian Bug report logs - #342289 xpdf security problems partially affect pdftoht (Debian)
- Debian Bug report logs - #342292 tetex-bin: Multiple exploitable heap overflows (Debian)
- Debian Bug report logs - #342294 koffice: Exploitable heap overflows in embedded (Debian)
- DSA-961-1 pdfkit.framework -- buffer overflows (Debian)
- DSA-962-1 pdftohtml -- buffer overflows (Debian)
- Multiple Vendor xpdf DCTStream Baseline Heap Overflow Vulnerability (iDEFENSE)
- Multiple Vendor xpdf DCTStream Progressive Heap Overflow (iDEFENSE)
- Multiple Vendor xpdf JPX Stream Reader Heap Overflow Vulnerability (iDEFENSE)
- Multiple Vendor xpdf StreamPredictor Heap Overflow Vulnerability (iDEFENSE)
- RHSA-2005:840-10 - xpdf security update (RedHat)
- RHSA-2005:840-5 - xpdf security update (RedHat)
- RHSA-2005:867-5 - gpdf security update (RedHat)
- RHSA-2005:868-4 - kdegraphics security update (RedHat)
- RHSA-2005:878-4 - cups security update (RedHat)
- RHSA-2006:0160-14 - tetex security update (RedHat)
- Sun Alert ID: 102972 - Multiple Security Vulnerabilities in the Solaris Gnome PD (Sun)
- TLSA-2006-2 - Multiple vulnerabilities exist in cups (TurboLinux)
- Xpdf Homepage (Xpdf)
- [DSA 950-1] New CUPS packages fix arbitrary code execution ([email protected] (Martin Schulze))