Description
xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.redhat.com/support/errata/RHSA-2005-706.html ↗
- http://secunia.com/advisories/17277 ↗
- http://www.redhat.com/support/errata/RHSA-2005-671.html ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10280 ↗
- http://www.debian.org/security/2006/dsa-1136 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:138 ↗
- http://www.novell.com/linux/security/advisories/2005_19_sr.html ↗
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1 ↗
- http://secunia.com/advisories/18398 ↗
- http://www.securityfocus.com/archive/1/427053/100/0/threaded ↗
- http://www.debian.org/security/2006/dsa-936 ↗
- https://usn.ubuntu.com/163-1/ ↗
- http://www.vupen.com/english/advisories/2007/2280 ↗
- http://www.redhat.com/support/errata/RHSA-2005-670.html ↗
- http://secunia.com/advisories/18407 ↗
- http://secunia.com/advisories/25729 ↗
- http://www.debian.org/security/2005/dsa-780 ↗
- http://www.securityfocus.com/bid/14529 ↗
- http://www.securityfocus.com/archive/1/427990/100/0/threaded ↗
- http://www.redhat.com/support/errata/RHSA-2005-708.html ↗
- http://secunia.com/advisories/21339 ↗