[Full-disclosure] [SECURITY] [DSA 961-1] New pdfkit.framework packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 961-1 [email protected] http://www.debian.org/security/ Martin Schulze February 1st, 2006 http://www.debian.org/security/faq -...

CVE-2006-0301

CVE-2006-0301 describes a heap-based buffer overflow in Splash.cc of xpdf (and affected derivatives such as pdfkit.framework, gpdf, kdegraphics/kpdf), exploitable via crafted splash images that overflow bitmap dimensions. The issue can cause denial of service and, per advisories, may allow arbitr...

CVE-2006-0301: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Splash.cc in xpdf, as used in other products such as 1 poppler, 2 kdegraphics, 3 gpdf, 4 pdfkit.framework, and others, allows attackers to cause a denial of service and possibly execute arbitrary code via crafted splash images that produce certain values that exceed...