Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:1544-1

Опубликовано: 10 июн. 2016
Источник: suse-cvrf

Описание

Security update for poppler

This update for poppler fixes the following issues:

Security issues fixed:

  • CVE-2015-8868: Corrupted PDF file can corrupt heap, causing DoS (bsc#976844)

Список пакетов

SUSE Linux Enterprise Server 11 SP4
libpoppler-glib4-0.12.3-1.12.1
libpoppler-qt4-3-0.12.3-1.12.1
libpoppler5-0.12.3-1.12.1
poppler-tools-0.12.3-1.12.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
libpoppler-glib4-0.12.3-1.12.1
libpoppler-qt4-3-0.12.3-1.12.1
libpoppler5-0.12.3-1.12.1
poppler-tools-0.12.3-1.12.1
SUSE Linux Enterprise Software Development Kit 11 SP4
libpoppler-devel-0.12.3-1.12.1
libpoppler-glib-devel-0.12.3-1.12.1
libpoppler-qt2-0.12.3-1.12.1
libpoppler-qt3-devel-0.12.3-1.12.1
libpoppler-qt4-devel-0.12.3-1.12.1
poppler-tools-0.12.3-1.12.1

Ссылки

Описание

Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF document.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:libpoppler-glib4-0.12.3-1.12.1
SUSE Linux Enterprise Server 11 SP4:libpoppler-qt4-3-0.12.3-1.12.1
SUSE Linux Enterprise Server 11 SP4:libpoppler5-0.12.3-1.12.1
SUSE Linux Enterprise Server 11 SP4:poppler-tools-0.12.3-1.12.1
Ссылки