Problem description :

Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause Xpdf to crash, or potentially execute arbitrary code when opened.
(CVE-2007-4352, CVE-2007-5392, CVE-2007-5393)

From Red Hat Security Advisory 2007:1029 :

Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

Xpdf is an X Window System-based viewer for Portable Document Format (PDF) files.

Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause Xpdf to crash, or potentially execute arbitrary code when opened.
(CVE-2007-4352, CVE-2007-5392, CVE-2007-5393)

Users are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2007:1024 advisory.

  - xpdf memory corruption in DCTStream::readProgressiveDataUnit() (CVE-2007-4352)

  - xpdf buffer overflow in DCTStream::reset() (CVE-2007-5392)

  - xpdf buffer overflow in CCITTFaxStream::lookChar() (CVE-2007-5393)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Resolves: xpdf memory corruption in DCTStream::readProgressiveDataUnit() xpdf buffer overflow in DCTStream::reset() xpdf buffer overflow in CCITTFaxStream::lookChar()

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A buffer overflow in xpdf could be exploited by attackers to potentially execute arbitrary code (CVE-2007-4352, CVE-2007-5392, CVE-2007-5393).

A buffer overflow in the xpdf code contained in cups could be exploited by attackers to potentially execute arbitrary code (CVE-2007-4352, CVE-2007-5392, CVE-2007-5393).

The remote host is affected by the vulnerability described in GLSA-200711-22 (Poppler, KDE: User-assisted execution of arbitrary code)

    Alin Rad Pop (Secunia Research) discovered several vulnerabilities in     the 'Stream.cc' file of Xpdf: An integer overflow in the     DCTStream::reset() method and a boundary error in the     CCITTFaxStream::lookChar() method, both leading to heap-based buffer     overflows (CVE-2007-5392, CVE-2007-5393). He also discovered a boundary     checking error in the DCTStream::readProgressiveDataUnit() method     causing memory corruption (CVE-2007-4352). Note: Gentoo's version of     Xpdf is patched to use the Poppler library, so the update to Poppler     will also fix Xpdf.
  Impact :

    By enticing a user to view or process a specially crafted PDF file with     KWord or KPDF or a Poppler-based program such as Gentoo's viewers Xpdf,     ePDFView, and Evince or the CUPS printing system, a remote attacker     could cause an overflow, potentially resulting in the execution of     arbitrary code with the privileges of the user running the application.
  Workaround :

    There is no known workaround at this time.

Alin Rad Pop found several flaws in how PDF files are handled in cups.
An attacker could create a malicious PDF file that would cause cups to crash or potentially execute arbitrary code when opened.

The updated packages have been patched to correct this issue.

Alin Rad Pop found several flaws in how PDF files are handled in kpdf.
An attacker could create a malicious PDF file that would cause kpdf to crash or potentially execute arbitrary code when opened.

The updated packages have been patched to correct this issue.

Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause TeTeX to crash or potentially execute arbitrary code when opened.
(CVE-2007-4352, CVE-2007-5392, CVE-2007-5393)

A flaw was found in the t1lib library, used in the handling of Type 1 fonts. An attacker could create a malicious file that would cause TeTeX to crash, or potentially execute arbitrary code when opened.
(CVE-2007-4033)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
60292	Scientific Linux Security Update : xpdf on SL4.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
67606	Oracle Linux 4 : xpdf (ELSA-2007-1029)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
28168	RHEL 4 : kdegraphics (RHSA-2007:1024)	Nessus	Red Hat Local Security Checks	2007/11/12	2024/4/21	high
28157	Fedora 8 : xpdf-3.02-4.fc8 (2007-3014)	Nessus	Fedora Local Security Checks	2007/11/12	2021/1/11	high
28179	openSUSE 10 Security Update : xpdf (xpdf-4643)	Nessus	SuSE Local Security Checks	2007/11/12	2021/1/14	high
28203	openSUSE 10 Security Update : cups (cups-4668)	Nessus	SuSE Local Security Checks	2007/11/14	2021/1/14	high
28261	GLSA-200711-22 : Poppler, KDE: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	2007/11/20	2021/1/6	high
28276	Mandrake Linux Security Advisory : cups (MDKSA-2007:228)	Nessus	Mandriva Local Security Checks	2007/11/20	2021/1/6	high
37122	Mandrake Linux Security Advisory : kdegraphics (MDKSA-2007:221)	Nessus	Mandriva Local Security Checks	2009/4/23	2021/1/6	high
60294	Scientific Linux Security Update : tetex on SL5.x, SL4.x, SL3.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high

検出

プラグインの検索

high

high

high

high

high

high

high

high

high

high