SciLinux: CVE-2007-3387 gpdf SL4.x i386/x86_64
Summary
Date: Tue, 31 Jul 2007 14:08:04 -0500Reply-To: Troy DawsonSender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA for gpdf on SL4.x i386/x86_64Comments: To: scientific-linux-errata@fnal.govSynopsis: Important: gpdf security updateIssue date: 2007-07-30CVE Names: CVE-2007-3387Maurycy Prodeus discovered an integer overflow flaw in the processingof PDF files. An attacker could create a malicious PDF file that wouldcause gpdf to crash or potentially execute arbitrary code when opened.(CVE-2007-3387)SL 4.x SRPMS: gpdf-2.8.2-7.7.src.rpm i386: gpdf-2.8.2-7.7.i386.rpm x86_64: gpdf-2.8.2-7.7.x86_64.rpm-Connie Sieh-Troy Dawson