Oval Definition:	oval:org.mitre.oval:def:10280
Revision Date: 2013-04-29 Version: 12 Title: xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information. Description: xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2005-2097 Platform(s): CentOS Linux 3 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 4 Product(s): Definition Synopsis OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 OR CentOS Linux 3.x AND Configuration section cups-devel is earlier than 1:1.1.17-13.3.31 OR cups is earlier than 1:1.1.17-13.3.31 OR cups-libs is earlier than 1:1.1.17-13.3.31 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 OR CentOS Linux 4.x OR Oracle Linux 4.x AND Configuration section kdegraphics-devel is earlier than 7:3.3.1-3.4 OR gpdf is earlier than 0:2.8.2-4.4 OR cups-devel is earlier than 1:1.1.22-0.rc1.9.7 OR xpdf is earlier than 1:3.00-11.8 OR kdegraphics is earlier than 7:3.3.1-3.4 OR cups is earlier than 1:1.1.22-0.rc1.9.7 OR cups-libs is earlier than 1:1.1.22-0.rc1.9.7
BACK