poppler vulnerability

2007-08-0700:00:00

ubuntu.com

7.2 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.065 Low

EPSS

Percentile

93.7%

JSON

Releases

Ubuntu 7.04
Ubuntu 6.10
Ubuntu 6.06

Details

USN-496-1 fixed a vulnerability in koffice. This update provides the
corresponding updates for poppler, the library used for PDF handling in
Gnome.

Original advisory details:

Derek Noonburg discovered an integer overflow in the Xpdf function
StreamPredictor::StreamPredictor(). By importing a specially crafted PDF
file into KWord, this could be exploited to run arbitrary code with the
user’s privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.04noarchlibpoppler1< 0.5.4-0ubuntu8.1UNKNOWN
Ubuntu6.10noarchlibpoppler1< 0.5.4-0ubuntu4.2UNKNOWN
Ubuntu6.06noarchlibpoppler1< 0.5.1-0ubuntu7.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	7.04	noarch	libpoppler1	< 0.5.4-0ubuntu8.1	UNKNOWN
Ubuntu	6.10	noarch	libpoppler1	< 0.5.4-0ubuntu4.2	UNKNOWN
Ubuntu	6.06	noarch	libpoppler1	< 0.5.1-0ubuntu7.2	UNKNOWN