Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

Xpdf is an X Window System-based viewer for Portable Document Format (PDF) files.

Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause Xpdf to crash, or potentially execute arbitrary code when opened.
(CVE-2007-4352, CVE-2007-5392, CVE-2007-5393)

Users are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.

Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause CUPS to crash or potentially execute arbitrary code when printed.
(CVE-2007-4352, CVE-2007-5392, CVE-2007-5393)

From Red Hat Security Advisory 2007:1024 :

Updated kdegraphics packages that fix several security issues are now available for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

The kdegraphics packages contain applications for the K Desktop Environment. This includes kpdf, a PDF file viewer.

Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause kpdf to crash, or potentially execute arbitrary code when opened.
(CVE-2007-4352, CVE-2007-5392, CVE-2007-5393)

All kdegraphics users are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.

From Red Hat Security Advisory 2007:1025 :

Updated gpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

gpdf is a GNOME-based viewer for Portable Document Format (PDF) files.

Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause gpdf to crash, or potentially execute arbitrary code when opened.
(CVE-2007-4352, CVE-2007-5392, CVE-2007-5393)

Users are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.

From Red Hat Security Advisory 2007:1027 :

Updated tetex packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5.

This update has been rated as having important security impact by the Red Hat Security Response Team.

TeTeX is an implementation of TeX. TeX takes a text file and a set of formatting commands as input, and creates a typesetter-independent DeVice Independent (dvi) file as output.

Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause TeTeX to crash or potentially execute arbitrary code when opened.
(CVE-2007-4352, CVE-2007-5392, CVE-2007-5393)

A flaw was found in the t1lib library, used in the handling of Type 1 fonts. An attacker could create a malicious file that would cause TeTeX to crash, or potentially execute arbitrary code when opened.
(CVE-2007-4033)

Users are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.

Resolves: xpdf memory corruption in DCTStream::readProgressiveDataUnit() xpdf buffer overflow in DCTStream::reset() xpdf buffer overflow in CCITTFaxStream::lookChar()

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2007:1024 advisory.

  - xpdf memory corruption in DCTStream::readProgressiveDataUnit() (CVE-2007-4352)

  - xpdf buffer overflow in DCTStream::reset() (CVE-2007-5392)

  - xpdf buffer overflow in CCITTFaxStream::lookChar() (CVE-2007-5393)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

USN-542-1 fixed a vulnerability in poppler. This update provides the corresponding updates for KWord, part of KOffice.

Secunia Research discovered several vulnerabilities in poppler. If a user were tricked into loading a specially crafted PDF file, a remote attacker could cause a denial of service or possibly execute arbitrary code with the user's privileges in applications linked against poppler.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Alin Rad Pop found several flaws in how PDF files are handled in pdftohtml. An attacker could create a malicious PDF file that would cause pdftohtml to crash or potentially execute arbitrary code when opened.

The updated packages have been patched to correct this issue.

Alin Rad Pop found several flaws in how PDF files are handled in cups.
An attacker could create a malicious PDF file that would cause cups to crash or potentially execute arbitrary code when opened.

The updated packages have been patched to correct this issue.

A buffer overflow in the xpdf code contained in cups could be exploited by attackers to potentially execute arbitrary code.
(CVE-2007-4352 / CVE-2007-5392 / CVE-2007-5393)

Updated gpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

gpdf is a GNOME-based viewer for Portable Document Format (PDF) files.

Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause gpdf to crash, or potentially execute arbitrary code when opened.
(CVE-2007-4352, CVE-2007-5392, CVE-2007-5393)

Users are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.

A number of vulnerabilities have been found in the xpdf code used by cups which could be exploited, potentially remotely, by tricking the user to print a specially crafted PDF file.

The vulnerabilities are in the source code file Stream.cc and may allow execution of arbitrary code with the privileges of the user viewing the PDF. Specifically, these are an array indexing error leading to memory corruption (CVE-2007-4352), a possible integer overflow causing to a buffer overflow (CVE-2007-5392) and a boundary check error that can also cause a buffer overflow. (CVE-2007-5393)

From Red Hat Security Advisory 2007:1029 :

Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

Xpdf is an X Window System-based viewer for Portable Document Format (PDF) files.

Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause Xpdf to crash, or potentially execute arbitrary code when opened.
(CVE-2007-4352, CVE-2007-5392, CVE-2007-5393)

Users are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
38001	CentOS 4 : xpdf (CESA-2007:1029)	Nessus	CentOS Local Security Checks	2009/4/23	2021/1/4	high
60287	Scientific Linux Security Update : cups on SL5.x, SL4.x, SL3.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
67601	Oracle Linux 4 : kdegraphics (ELSA-2007-1024)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
67602	Oracle Linux 4 : gpdf (ELSA-2007-1025)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
67604	Oracle Linux 4 : tetex (ELSA-2007-1027)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
28157	Fedora 8 : xpdf-3.02-4.fc8 (2007-3014)	Nessus	Fedora Local Security Checks	2007/11/12	2021/1/11	high
28158	Fedora 7 : xpdf-3.02-4.fc7 (2007-3031)	Nessus	Fedora Local Security Checks	2007/11/12	2021/1/11	high
28168	RHEL 4 : kdegraphics (RHSA-2007:1024)	Nessus	Red Hat Local Security Checks	2007/11/12	2024/4/21	high
28249	Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : koffice vulnerabilities (USN-542-2)	Nessus	Ubuntu Local Security Checks	2007/11/16	2021/1/19	high
28273	Mandrake Linux Security Advisory : pdftohtml (MDKSA-2007:223)	Nessus	Mandriva Local Security Checks	2007/11/20	2021/1/6	high
28276	Mandrake Linux Security Advisory : cups (MDKSA-2007:228)	Nessus	Mandriva Local Security Checks	2007/11/20	2021/1/6	high
29413	SuSE 10 Security Update : Cups (ZYPP Patch Number 4667)	Nessus	SuSE Local Security Checks	2007/12/13	2021/1/14	high
36452	CentOS 4 : gpdf (CESA-2007:1025)	Nessus	CentOS Local Security Checks	2009/4/23	2021/1/4	high
41166	SuSE9 Security Update : Cups (YOU Patch Number 11965)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	high
67606	Oracle Linux 4 : xpdf (ELSA-2007-1029)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high