>> Redhat Security Update Fixes gpdf Denial of Service Vulnerability
Title : Redhat Security Update Fixes gpdf Denial of Service Vulnerability VUPEN ID : VUPEN/ADV-2005-1374 CVE ID : CVE-2005-2097 CWE ID : CWE-
Rated as : Low Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2005-08-11
Technical Description
Redhat has released updated packages to correct a vulnerability identified in GNOME pdf. This flaw is due to an error when verifying the validity of the "loca" table in PDF files, which could be exploited via a specially crafted PDF file to cause kpdf to consume all available disk space in "/tmp" when opened. For additional information, see : VUPEN/ADV-2005-1372
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback If you have additional information or corrections for this security advisory please submit them via our contact form.
