|
|
>> Fedora Security Update Fixes Poppler Buffer Overflow Vulnerability
|
Title : Fedora Security Update Fixes Poppler Buffer Overflow Vulnerability
VUPEN ID : VUPEN/ADV-2005-2815
CVE ID : CVE-2005-3193
Rated as : High Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2005-12-09
|
Fedora has released updated packages to correct multiple vulnerabilities identified in Poppler. These flaws could be exploited by remote attackers to execute arbitrary commands and take complete control of an affected system. For additional information, see : VUPEN/ADV-2005-2789
Affected Products
Fedora Core 4
Solution
Upgrade the affected packages :
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
f93557229ed4dece70462442b3c50f5d SRPMS/poppler-0.4.1-1.2.src.rpm
3fabe97626a43cd9a22b0c7ba4c23aae ppc/poppler-0.4.1-1.2.ppc.rpm
83c72b7c3012d61505ba308c0c246902 ppc/poppler-devel-0.4.1-1.2.ppc.rpm
c51cedea18bbc38ed4c385f4d5f0f00c ppc/debug/poppler-debuginfo-0.4.1-1.2.ppc.rpm
36f5d03cd88436ba9aa081d10bac160b x86_64/poppler-0.4.1-1.2.x86_64.rpm
07260f88d481ce0cf84cf0847c4c3190 x86_64/poppler-devel-0.4.1-1.2.x86_64.rpm
dc1af9888344a1d533305798d9340116 x86_64/debug/poppler-debuginfo-0.4.1-1.2.x86_64.rpm
90557b8ee1b2ffe3cd01708a0e1c934f i386/poppler-0.4.1-1.2.i386.rpm
6b02cd497a5f4b6ec3d5ee02205ae6ca i386/poppler-devel-0.4.1-1.2.i386.rpm
2fc9ee2ed8bc6f1a54b2bf56c384873d i386/debug/poppler-debuginfo-0.4.1-1.2.i386.rpm
References
http://www.vupen.com/english/advisories/2005/2815
http://www.frsirt.com/english/reference/2162
ChangeLog
2005-12-09 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
