|
|
>> Mandriva Security Update Fixes Xpdf Catalog Dictionary Denial of Service Issue
|
Title : Mandriva Security Update Fixes Xpdf Catalog Dictionary Denial of Service Issue
VUPEN ID : VUPEN/ADV-2007-0249
CVE ID : CVE-2007-0104
Rated as : Low Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2007-01-19
|
Mandriva has released security updates to address a vulnerability identified in Xpdf. This issue could be exploited by attackers to cause a denial of service. For additional information, see : VUPEN/ADV-2007-0203
Affected Products
Mandriva Linux 2007.0
Mandriva Corporate 4.0
Mandriva Corporate 3.0
Solution
Upgrade the affected packages :
Mandriva Linux 2007.0:
e34f95bfcc5bee00a123ee84d9e14aba 2007.0/i586/xpdf-3.01pl2-3.1mdv2007.0.i586.rpm
9fbbb1a928599ec327501ea350b8871a 2007.0/i586/xpdf-tools-3.01pl2-3.1mdv2007.0.i586.rpm
19112d086453c2fdb928011fe6f7aa0c 2007.0/SRPMS/xpdf-3.01pl2-3.1mdv2007.0.src.rpm
Mandriva Linux 2007.0/X86_64:
76e9749a053f7162c894741884c89835 2007.0/x86_64/xpdf-3.01pl2-3.1mdv2007.0.x86_64.rpm
f20e65b356ec330fd60e095add93d04a 2007.0/x86_64/xpdf-tools-3.01pl2-3.1mdv2007.0.x86_64.rpm
19112d086453c2fdb928011fe6f7aa0c 2007.0/SRPMS/xpdf-3.01pl2-3.1mdv2007.0.src.rpm
Corporate 3.0:
39a410e5887ddda80b0a2c4541082d50 corporate/3.0/i586/xpdf-3.00-5.9.C30mdk.i586.rpm
d4e017b43f39e1dd0e3d8367c62633d2 corporate/3.0/SRPMS/xpdf-3.00-5.9.C30mdk.src.rpm
Corporate 3.0/X86_64:
e01a2822cf592a56d89a13b73b8fa133 corporate/3.0/x86_64/xpdf-3.00-5.9.C30mdk.x86_64.rpm
d4e017b43f39e1dd0e3d8367c62633d2 corporate/3.0/SRPMS/xpdf-3.00-5.9.C30mdk.src.rpm
Corporate 4.0:
9899a75731800c052d32a7e8cfceedf4 corporate/4.0/i586/xpdf-3.01-1.3.20060mlcs4.i586.rpm
0c9969ce74ae66d95ff902181f83e0e5 corporate/4.0/SRPMS/xpdf-3.01-1.3.20060mlcs4.src.rpm
Corporate 4.0/X86_64:
5d2343239f0e46efa4df3c81a0c14191 corporate/4.0/x86_64/xpdf-3.01-1.3.20060mlcs4.x86_64.rpm
0c9969ce74ae66d95ff902181f83e0e5 corporate/4.0/SRPMS/xpdf-3.01-1.3.20060mlcs4.src.rpm
References
http://www.vupen.com/english/advisories/2007/0249
http://archives.mandrivalinux.com/security-announce/2007-01/msg00031.php
ChangeLog
2007-01-19 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
