Множественные целочисленные переполнения в xpdf

Средняя (5.0)

(AV:N/AC:L/Au:N/C:N/I:N/A:P)

RedHat

cups (Unknown)

Обнаруженные уязвимости позволяют удаленному пользователю вызвать отказ в обслуживании приложения.
Целочисленные переполнения обнаружены в файлах "JBIG2Stream.cc", "Stream.cc" и "JPXStream.cc". Удаленный пользователь может с помощью специально сформированного PDF файла вызвать переполнение буфера и вызвать отказ в обслуживании приложения.

Установите исправление, доступное по CVS.
http://www.foolabs.com/xpdf/

DEBIAN (DSA-962): http://www.debian.org/security/2006/dsa-962
GENTOO (GLSA-200601-17): http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml
REDHAT (RHSA-2006:0163): http://www.redhat.com/support/errata/RHSA-2006-0163.html
FEDORA (FLSA:175404): http://www.securityfocus.com/archive/1/archive/1/427990/100/0/threaded
SGI (20060201-01-U): ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U
TRUSTIX (2006-0002): http://www.trustix.org/errata/2006/0002/
SCO (SCOSA-2006.15): ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt
SLACKWARE (SSA:2006-045-04): http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747
SLACKWARE (SSA:2006-045-09): http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683
FEDORA (FEDORA-2005-025): http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html
FEDORA (FEDORA-2005-026): http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html
MANDRIVA (MDKSA-2006:011): http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:011
FEDORA (FLSA-2006:176751): http://www.securityfocus.com/archive/1/archive/1/427053/100/0/threaded
http://scary.beasts.org/security/CESA-2005-003.txt
http://www.kde.org/info/security/advisory-20051207-2.txt
GENTOO (GLSA-200601-02): http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml
MANDRIVA (MDKSA-2006:003): http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:003
MANDRIVA (MDKSA-2006:004): http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:004
MANDRIVA (MDKSA-2006:005): http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:005
MANDRIVA (MDKSA-2006:006): http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:006
UBUNTU (USN-236-1): http://www.ubuntulinux.org/support/documentation/usn/usn-236-1
BID (16143): http://www.securityfocus.com/bid/16143
FRSIRT (ADV-2006-0047): http://www.frsirt.com/english/advisories/2006/0047
MANDRIVA (MDKSA-2006:008): http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:008
http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00011.html
http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00010.html
DEBIAN (DSA-931): http://www.debian.org/security/2005/dsa-931
DEBIAN (DSA-932): http://www.debian.org/security/2005/dsa-932
DEBIAN (DSA-937): http://www.debian.org/security/2005/dsa-937
DEBIAN (DSA-938): http://www.debian.org/security/2005/dsa-938
DEBIAN (DSA-940): http://www.debian.org/security/2005/dsa-940
MANDRAKE (MDKSA-2006:010): http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:010
MANDRIVA (MDKSA-2006:012): http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:012
REDHAT (RHSA-2006:0177): http://rhn.redhat.com/errata/RHSA-2006-0177.html
SUSE (SUSE-SA:2006:001): http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html
DEBIAN (DSA-936): http://www.debian.org/security/2006/dsa-936
DEBIAN (DSA-950): http://www.debian.org/security/2006/dsa-950
REDHAT (RHSA-2006:0160): http://www.redhat.com/support/errata/RHSA-2006-0160.html
SGI (20051201-01-U): ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U
SGI (20060101-01-U): ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
DEBIAN (DSA-961): http://www.debian.org/security/2006/dsa-961
XF (xpdf-flatedecode-dos(24026)): http://xforce.iss.net/xforce/xfdb/24026