Security Advisory SA43823 - Xpdf Linux Binaries t1lib Vulnerability

Overview

Advisories

Research

Forums

Create Profile

Our Commitment

Database

Advisories by Product

Advisories by Vendor

Terminology

Report Vulnerability

Insecure Library Loading

Secunia Advisory SA43823

Xpdf Linux Binaries t1lib Vulnerability

Secunia Advisory

SA43823

Release Date

2011-03-22

Last Update

2011-04-05

Popularity

2,389 views

Comments

0 comments

Criticality level

Highly critical

Impact

DoS
System access

Where

From remote

Authentication level

This information is available to Secunia VIM customers

Report reliability

This information is available to Secunia VIM customers

Solution Status

Vendor Patch

Systems affected

This information is available to Secunia VIM customers

Approve distribution

This information is available to Secunia VIM customers

Software:

Xpdf 3.x

Secunia CVSS Score

This information is available to Secunia VIM Customers

CVE Reference(s)

CVE-2011-0764 CVSS score available to Secunia VIM customers
CVE-2011-1552 CVSS score available to Secunia VIM customers
CVE-2011-1553 CVSS score available to Secunia VIM customers
CVE-2011-1554 CVSS score available to Secunia VIM customers

Description

A vulnerability has been reported in Xpdf, which can be exploited by malicious people to cause a DoS and potentially compromise a user's system.

The vulnerability is caused due to the Xpdf binaries for Linux being linked against a vulnerable version of t1lib.

The vulnerability is reported in the Xpdf binaries for Linux prior to version 3.02pl6.

Solution
Update to version 3.02pl6 of the Linux binaries.
Further details available to Secunia VIM customers

Provided and/or discovered by
Jonathan Brossard, Toucan System

Changelog
Further details available to Secunia VIM customers

Original Advisory
Xpdf:
http://www.foolabs.com/xpdf/download.html

US-CERT VU#376500:
http://www.kb.cert.org/vuls/id/376500

Toucan System:
http://www.toucan-system.com/advisories/tssa-2011-01.txt

Deep Links
Links available to Secunia VIM customers

Do you have additional information related to this advisory?

Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com

Subject: Xpdf Linux Binaries t1lib Vulnerability

No posts yet

Secunia Advisory SA43823

Xpdf Linux Binaries t1lib Vulnerability

Do you have additional information related to this advisory?

You must be logged in to post a comment.

Secunia Customer Login

Not a customer already?