MDVSA-2010:228 -- Mandriva xpdfID: oval:org.secpod.oval:def:300019 | Date: (C)2012-01-07 (M)2021-09-11 |
Class: PATCH | Family: unix |
Multiple vulnerabilities were discovered and corrected in xpdf: The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, allows context-dependent attackers to cause a denial of service via unknown vectors that trigger an uninitialized pointer dereference . The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a PDF file with a crafted Type1 font that contains a negative array index, which bypasses input validation and which triggers memory corruption . Packages for 2009.0 are provided as of the Extended Maintenance Program
Platform: |
Mandriva Linux 2009.0 |