|
|
>> Fedora Security Update Fixes Xpdf Splash Buffer Overflow Vulnerability
|
Title : Fedora Security Update Fixes Xpdf Splash Buffer Overflow Vulnerability
VUPEN ID : VUPEN/ADV-2006-0515
CVE ID : CVE-2006-0301
Rated as : High Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2006-02-12
|
Fedora has released updated packages to address a vulnerability identified in Xpdf. This flaw is due to a heap overflow error when processing malformed splash images that produce certain values that exceed the "width" or "height" of the associated bitmap, which could be exploited by attackers to execute arbitrary code. For additional information, see : VUPEN/ADV-2006-0389
Affected Products
Fedora Core 4
Solution
Upgrade the affected packages :
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
aea6ed92fb72a3f6674e77f6d973d6227a174385 SRPMS/xpdf-3.01-0.FC4.8.src.rpm
39f47f83421e36ff6b5ab0713ca792555eaac2d3 ppc/xpdf-3.01-0.FC4.8.ppc.rpm
9b557fbbd3a8ae434c2f0ad244fa1bcf7dabe6fa ppc/debug/xpdf-debuginfo-3.01-0.FC4.8.ppc.rpm
565e4e6eefaad8c740db501fbe87424c21cb32ea x86_64/xpdf-3.01-0.FC4.8.x86_64.rpm
91fd44a731cd12ff96e76b34381c047465af3983 x86_64/debug/xpdf-debuginfo-3.01-0.FC4.8.x86_64.rpm
4d4190ad7743c84acc0ad2070ae6ece97dab7232 i386/xpdf-3.01-0.FC4.8.i386.rpm
6e39fde98f929e680ee931cc5146a23d6e7e9c67 i386/debug/xpdf-debuginfo-3.01-0.FC4.8.i386.rpm
References
http://www.vupen.com/english/advisories/2006/0515
http://www.frsirt.com/english/reference/5661
ChangeLog
2006-02-12 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
