Security Advisory (MDKSA-2003:071): xpdf

[aru]

MandrakeSoft Security Advisory MDKSA-2003:071 : xpdf

 

June 27th, 2003

Updated xpdf packages fix arbitrary code execution vulnerability

 

Martyn Gilmore discovered flaws in various PDF viewers, including xpdf. An attacker could place malicious external hyperlinks in a document that, if followed, could execute arbitary shell commands with the privileges of the person viewing the PDF document.

 

 

The released versions of Mandrake GNU/Linux affected are:

• 9.0

 

[*] 9.1

 

[*] 9.1/PPC

 

[*] Corporate Server 2.1

Full information about this advisory, including the updated packages, is available at:

www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:071

 

Other references:

http://cve.mitre.org/cgi-bin/cvename.cgi?n...e=CAN-2003-0434

 

Posted automatically by aru (mdksec2mub v0.0.6)