Xpdf multiple security vulnerabilities
Published:		08.11.2007
Source:		BUGTRAQ
SecurityVulns ID:		8328
Type:		client
Level:		6/10
Description:		Buffer overflows, integer overflows, array index overflows.

Affected:		XPDF : xpdf 3.02
CVE:		CVE-2007-5393 (Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.)
		CVE-2007-5392
		CVE-2007-4352

Original document

SECUNIA, Secunia Research: Xpdf "Stream.cc" Multiple Vulnerabilities (08.11.2007)

Discuss:

Read or add your comments to this news (0 comments)