Lucene search

K
osvGoogleOSV:DSA-1354-1
HistoryAug 13, 2007 - 12:00 a.m.

gpdf - integer overflow

2007-08-1300:00:00
Google
osv.dev
25

0.074 Low

EPSS

Percentile

94.1%

It was discovered that an integer overflow in xpdf PDF viewer may lead
to the execution of arbitrary code if a malformed PDF file is opened.

gpdf includes a copy of the xpdf code and requires an update as well.

For the oldstable distribution (sarge) this problem has been fixed in
version 2.8.2-1.2sarge6.

The stable distribution (etch) no longer contains gpdf.

The unstable distribution (sid) no longer contains gpdf.

We recommend that you upgrade your gpdf packages.