GNUStep PDFKit Framework Xpdf Multiple Vulnerabilities - Advisories

GNUStep PDFKit Framework Xpdf Multiple Vulnerabilities

Secunia Advisory:	SA18674
Release Date:	2006-02-01

Critical:	Moderately critical
Impact:	DoS System access
Where:	From remote
Solution Status:	Unpatched

Software:	GNUStep PDFKit Framework 0.x

CVE reference:	CVE-2005-3191 (Secunia mirror) CVE-2005-3192 (Secunia mirror) CVE-2005-3193 (Secunia mirror) CVE-2005-3624 (Secunia mirror)

	This advisory is currently marked as unpatched! - Companies can be alerted when a patch is released!

Description: Some vulnerabilities have been reported in GNUStep PDFKit Framework, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a user's system. The vulnerabilities are caused due to the use of a vulnerable version of Xpdf. For more information: SA17897 SA18303 Solution: Restrict use to trusted PDF files only. Some Linux vendors have released updated packages. Original Advisory: http://www.debian.org/security/2006/dsa-961 Other References: SA17897: http://secunia.com/advisories/17897/ SA18303: http://secunia.com/advisories/18303/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

1 Related Secunia Security Advisories

1. PDFKit Framework PDF Splash Image Buffer Overflow

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	dotProject SQL Injection and Cross-Site Scripting

2.	Novell eDirectory Multiple Vulnerabilities

3.	HP TCP/IP Services for OpenVMS Finger Format String Vulnerability

4.	Blogn Cross-Site Scripting and Cross-Site Request Forgery

5.	phpBB BBcode Script Insertion Vulnerability

6.	Adium MSN SLP Message Integer Overflow Vulnerabilities

7.	Caudium "configvar" Insecure Temporary Files

8.	phpMyRealty "price_max" SQL Injection Vulnerability

9.	Acoustica Mixcraft ".mx4" File Processing Buffer Overflow

10.	Novell Forum TCL Command Injection Vulnerability