SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Generic)  >   Poppler Vendors:   Freedesktop.org
(Red Hat Issues Fix for Poppler) KDE kpdf/xpdf Integer Overflow in StreamPredictor() Lets Remote Users Execute Arbitrary Code
SecurityTracker Alert ID:  1018476
SecurityTracker URL:  http://securitytracker.com/id/1018476
CVE Reference:   CVE-2007-3387   (Links to External Site)
Date:  Jul 30 2007
Impact:   Execution of arbitrary code via network, User access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): 3.2.0 - 3.5.7
Description:   A vulnerability was reported in KDE kpdf (and xpdf). A remote user can cause arbitrary code to be executed on the target user's system. Poppler is affected.

A remote user can create a specially crafted PDF file that, when loaded by the target user, will trigger an integer overflow in the StreamPredictor() and execute arbitrary code on the target system. The code will run with the privileges of the target user or application.

The vulnerability resides in code share by xpdf and kpdf.

The vendor credits Derek Noonburg with reporting this vulnerability.

Impact:   A remote user can create a PDF file that, when loaded by the target user, will execute arbitrary code on the target user's system.
Solution:   Red Hat has released a fix for poppler, which is affected by this xpdf vulnerability.

The Red Hat advisory is available at:

https://rhn.redhat.com/errata/RHSA-2007-0732.html

Cause:   Boundary error
Underlying OS:  Linux (Red Hat Enterprise)
Underlying OS Comments:  5

Message History:   This archive entry is a follow-up to the message listed below.
Jul 30 2007 KDE kpdf/xpdf Integer Overflow in StreamPredictor() Lets Remote Users Execute Arbitrary Code



 Source Message Contents

Subject:  [RHSA-2007:0732-01] Important: poppler security update


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ---------------------------------------------------------------------
                   Red Hat Security Advisory

Synopsis:          Important: poppler security update
Advisory ID:       RHSA-2007:0732-01
Advisory URL:      https://rhn.redhat.com/errata/RHSA-2007-0732.html
Issue date:        2007-07-30
Updated on:        2007-07-30
Product:           Red Hat Enterprise Linux
CVE Names:         CVE-2007-3387 
- ---------------------------------------------------------------------

1. Summary:

Updated poppler packages that fix a security issue in PDF handling are
now available for Red Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64
RHEL Desktop Workstation (v. 5 client) - i386, x86_64
Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64

3. Problem description:

Poppler is a PDF rendering library, used by applications such as evince.

Maurycy Prodeus discovered an integer overflow flaw in the processing
of PDF files.  An attacker could create a malicious PDF file that would
cause an application linked with poppler to crash or potentially execute
arbitrary code when opened.  (CVE-2007-3387)

All users of poppler should upgrade to these updated packages, which
contain a backported patch to resolve this issue.

4. Solution:

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.  

This update is available via Red Hat Network.  Details on how to use 
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

5. Bug IDs fixed (http://bugzilla.redhat.com/):

248194 - CVE-2007-3387 xpdf integer overflow

6. RPMs required:

Red Hat Enterprise Linux Desktop (v. 5 client):

SRPMS:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/poppler-0.5.4-4.1.el5.src.rpm
2748243d5dab417ee98c0ff3b56c48bc  poppler-0.5.4-4.1.el5.src.rpm

i386:
0b1a924d41c486698fb0ef170e3bea98  poppler-0.5.4-4.1.el5.i386.rpm
74075e576f12700d58e0efc1acf9ee4f  poppler-debuginfo-0.5.4-4.1.el5.i386.rpm
30690d55d19c44b300b6d4288b9b5e03  poppler-utils-0.5.4-4.1.el5.i386.rpm

x86_64:
0b1a924d41c486698fb0ef170e3bea98  poppler-0.5.4-4.1.el5.i386.rpm
06c6b81657b4dfa4c16547af8eb5d917  poppler-0.5.4-4.1.el5.x86_64.rpm
74075e576f12700d58e0efc1acf9ee4f  poppler-debuginfo-0.5.4-4.1.el5.i386.rpm
28870bd89ae8634f40c82347378191fc  poppler-debuginfo-0.5.4-4.1.el5.x86_64.rpm
d5217710ebb25c47aad59758cf11bdfa  poppler-utils-0.5.4-4.1.el5.x86_64.rpm

RHEL Desktop Workstation (v. 5 client):

SRPMS:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/poppler-0.5.4-4.1.el5.src.rpm
2748243d5dab417ee98c0ff3b56c48bc  poppler-0.5.4-4.1.el5.src.rpm

i386:
74075e576f12700d58e0efc1acf9ee4f  poppler-debuginfo-0.5.4-4.1.el5.i386.rpm
3a0a155e5d530f15b12d1508ab88cef0  poppler-devel-0.5.4-4.1.el5.i386.rpm

x86_64:
74075e576f12700d58e0efc1acf9ee4f  poppler-debuginfo-0.5.4-4.1.el5.i386.rpm
28870bd89ae8634f40c82347378191fc  poppler-debuginfo-0.5.4-4.1.el5.x86_64.rpm
3a0a155e5d530f15b12d1508ab88cef0  poppler-devel-0.5.4-4.1.el5.i386.rpm
ddc147c33c2e9c581ee2c7bba3e44596  poppler-devel-0.5.4-4.1.el5.x86_64.rpm

Red Hat Enterprise Linux (v. 5 server):

SRPMS:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/poppler-0.5.4-4.1.el5.src.rpm
2748243d5dab417ee98c0ff3b56c48bc  poppler-0.5.4-4.1.el5.src.rpm

i386:
0b1a924d41c486698fb0ef170e3bea98  poppler-0.5.4-4.1.el5.i386.rpm
74075e576f12700d58e0efc1acf9ee4f  poppler-debuginfo-0.5.4-4.1.el5.i386.rpm
3a0a155e5d530f15b12d1508ab88cef0  poppler-devel-0.5.4-4.1.el5.i386.rpm
30690d55d19c44b300b6d4288b9b5e03  poppler-utils-0.5.4-4.1.el5.i386.rpm

ia64:
1d4f3f5ce403009575c2223ac3e708c8  poppler-0.5.4-4.1.el5.ia64.rpm
32fd4de6a79bfb319a8c181fe91b2775  poppler-debuginfo-0.5.4-4.1.el5.ia64.rpm
37de0141d0a978228886827686dfb034  poppler-devel-0.5.4-4.1.el5.ia64.rpm
4045e010707c2519a23e41bf081e8e5d  poppler-utils-0.5.4-4.1.el5.ia64.rpm

ppc:
6df67cdf707e8dcef58f2b66def0646e  poppler-0.5.4-4.1.el5.ppc.rpm
676a4b1f1f25d2c5c0d72787ab2009e1  poppler-0.5.4-4.1.el5.ppc64.rpm
2cd14c9cebddc06476dff73c9b9fe35a  poppler-debuginfo-0.5.4-4.1.el5.ppc.rpm
feee81e8d354a9a8fb5c6c3754447f19  poppler-debuginfo-0.5.4-4.1.el5.ppc64.rpm
499d52521dfca164baedb43fc6856e83  poppler-devel-0.5.4-4.1.el5.ppc.rpm
7b128c68da3c46627c852f2e779423e2  poppler-devel-0.5.4-4.1.el5.ppc64.rpm
a364ec9dff6e8c7d323d095a645b818c  poppler-utils-0.5.4-4.1.el5.ppc.rpm

s390x:
8c8a8e7fce73cf301d6a29b59ec7ebea  poppler-0.5.4-4.1.el5.s390.rpm
16c42b5003fc1421ee4cb85fb4b02326  poppler-0.5.4-4.1.el5.s390x.rpm
819258ccfb8f51469d39073c7d318884  poppler-debuginfo-0.5.4-4.1.el5.s390.rpm
7af0f5f23d03cdd5b3cfe2437ba2e685  poppler-debuginfo-0.5.4-4.1.el5.s390x.rpm
1bbce665e57d59247b5aa335d892fa5c  poppler-devel-0.5.4-4.1.el5.s390.rpm
ac5cbd1c7966ee9871a83859f77172fd  poppler-devel-0.5.4-4.1.el5.s390x.rpm
8b54d4827349fcbd1deb375eab436a50  poppler-utils-0.5.4-4.1.el5.s390x.rpm

x86_64:
0b1a924d41c486698fb0ef170e3bea98  poppler-0.5.4-4.1.el5.i386.rpm
06c6b81657b4dfa4c16547af8eb5d917  poppler-0.5.4-4.1.el5.x86_64.rpm
74075e576f12700d58e0efc1acf9ee4f  poppler-debuginfo-0.5.4-4.1.el5.i386.rpm
28870bd89ae8634f40c82347378191fc  poppler-debuginfo-0.5.4-4.1.el5.x86_64.rpm
3a0a155e5d530f15b12d1508ab88cef0  poppler-devel-0.5.4-4.1.el5.i386.rpm
ddc147c33c2e9c581ee2c7bba3e44596  poppler-devel-0.5.4-4.1.el5.x86_64.rpm
d5217710ebb25c47aad59758cf11bdfa  poppler-utils-0.5.4-4.1.el5.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and 
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package

7. References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3387
http://www.redhat.com/security/updates/classification/#important

8. Contact:

The Red Hat security contact is <secalert@redhat.com>.  More contact
details at https://www.redhat.com/security/team/contact/

Copyright 2007 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)

iD8DBQFGrjeZXlSAg2UNWIIRAvP1AJ0bt6l4OKGmY7Pg9JwhNgo5t5/xqgCfXq2u
3WSmpxfIjD5xcI/wy7iuf54=
=iOQw
-----END PGP SIGNATURE-----



-- 
Enterprise-watch-list mailing list
Enterprise-watch-list@redhat.com
https://www.redhat.com/mailman/listinfo/enterprise-watch-list

 
 


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2022, SecurityGlobal.net LLC