Secunia

Dirk Mueller has reported a vulnerability in Xpdf, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a user's system.

The vulnerability is caused due to a boundary error in the splash rasterizer engine when handling PDF splash images with overly large dimensions. This can be exploited to cause a heap-based buffer overflow and may allow arbitrary code execution.

The vulnerability has been reported in version 3.01. Other versions may also be affected.

Solution
Apply xpdf-3.01pl2.patch.
Further details available in Customer Area

Provided and/or discovered by
Dirk Mueller

Changelog
Further details available in Customer Area

Original Advisory
KDE.org:
http://www.kde.org/info/security/advisory-20060202-1.txt

Deep Links
Links available in Customer Area