CVE-2011-2902

zxpdf in xpdf before 3.02-19 as packaged in Debian unstable and 3.02-12+squeeze1 as packaged in Debian squeeze deletes temporary files insecurely, which allows remote attackers to delete arbitrary files via a crafted .pdf.gz file name...

CVE-2011-2902

zxpdf in xpdf before 3.02-19 (Debian unstable) and 3.02-12+squeeze1 (Debian squeeze) insecurely deletes temporary files, enabling remote attackers to delete arbitrary files via a crafted .pdf.gz filename. The vulnerability is a file-deletion flaw within zxpdf, not a memory corruption or code-exec...

CVE-2011-2902

zxpdf in xpdf before 3.02-19 as packaged in Debian unstable and 3.02-12+squeeze1 as packaged in Debian squeeze deletes temporary files insecurely, which allows remote attackers to delete arbitrary files via a crafted .pdf.gz file name...