Ubuntu
xpdf package

xpdf 3.02-1.2ubuntu1.1 source package in Ubuntu

Changelog

xpdf (3.02-1.2ubuntu1.1) gutsy-security; urgency=low

  * SECURITY UPDATE:
    - CVE-2007-4352: Array index error in the DCTStream::readProgressiveDataUnit i
      method in xpdf/Stream.cc in Xpdf 3.02 with xpdf-3.02pl1.patch allows
      remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file.
    - CVE-2007-5392: Integer overflow in the DCTStream::reset method in xpdf/Stream.cc
      in Xpdf 3.02 with xpdf-3.02pl1.patch allows remote attackers
      to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.
    - CVE-2007-5393: Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc
      in Xpdf 3.02 with xpdf-3.02pl1.patch allows remote attackers to execute arbitrary code via a PDF
      file that contains a crafted CCITTFaxDecode filter.
  * debian/patches/fix-CVE-2007-5393_2007-5392_2007-4352.dpatch: added patch by Nico Golde <email address hidden>
    to fix those issues (LP: #160944)
  * References:
    CVE-2007-4352
    CVE-2007-5392
    CVE-2007-5393
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=450629

 -- Stephan Hermann <email address hidden>   Mon, 12 Nov 2007 13:17:09 +0100

Upload details

Uploaded by:
Stephan Rügamer
Uploaded to:
Gutsy
Original maintainer:
MOTU
Architectures:
any
Section:
text
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
xpdf_3.02.orig.tar.gz 659.1 KiB b33a7d56f454c331ae50996f989e86c9166e57af97b74de28cddf3d51ac11f00
xpdf_3.02-1.2ubuntu1.1.diff.gz 36.8 KiB 849c5cc5f5e7694767b70648e8b049b95572ed11c941a43447d4d7d71540857b
xpdf_3.02-1.2ubuntu1.1.dsc 965 bytes 83b124ae07594910a5ad9b5d019843eaa7d73793a0637b217218d7898523d7c5

View changes file

Binary packages built by this source

xpdf: No summary available for xpdf in ubuntu gutsy.

No description available for xpdf in ubuntu gutsy.

xpdf-common: No summary available for xpdf-common in ubuntu gutsy.

No description available for xpdf-common in ubuntu gutsy.

xpdf-reader: No summary available for xpdf-reader in ubuntu gutsy.

No description available for xpdf-reader in ubuntu gutsy.

xpdf-utils: No summary available for xpdf-utils in ubuntu gutsy.

No description available for xpdf-utils in ubuntu gutsy.