Описание
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| poppler | fixed | 0.4.4-1 | package | |
| tetex-bin | fixed | 3.0-12 | package | |
| gpdf | fixed | 2.10.0-2 | package | |
| kdegraphics | fixed | 4:3.5.0-3 | package | |
| xpdf | fixed | 3.01-4 | package | |
| koffice | fixed | 1:1.4.2-6 | package | |
| libextractor | fixed | 0.5.9-1 | package | |
| pdfkit.framework | fixed | 0.8-4 | package | |
| pdftohtml | fixed | 0.36-12 | package | |
| cups | fixed | 1.1.22-7 | package | |
| cupsys | fixed | 1.1.22-7 | package |
Примечания
cupsys switched to an external PDF implementation in 1.1.22-7.
tetex-bin switched to poppler in 3.0-12.
EPSS
Связанные уязвимости
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.
Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
EPSS