Nessus Plugin #15906

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[GLSA-200412-02] PDFlib: Multiple overflows in the included TIFF library

Family:

Gentoo Local Security Checks

Category:

infos

Copyright:

(C) 2004 Michel Arboi

Summary:

PDFlib: Multiple overflows in the included TIFF library

Version:

$Revision: 1.1 $

Cve_id:

CAN-2004-0803, CAN-2004-0804, CAN-2004-0886

Bugtraq_id:

-

Xrefs:

GLSA:200412-02

Description:

The remote host is affected by the vulnerability described in GLSA-200412-02
(PDFlib: Multiple overflows in the included TIFF library)


The TIFF library is subject to several known vulnerabilities (see
GLSA 200410-11). Most of these overflows also apply to PDFlib.

Impact

A remote attacker could entice a user or web application to
process a carefully crafted PDF file or TIFF image using a
PDFlib-powered program. This can potentially lead to the execution of
arbitrary code with the rights of the program processing the file.

Workaround

There is no known workaround at this time.

References:
http://www.pdflib.com/products/pdflib/info/PDFlib-5.0.4p1-changes.txt
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0803
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0804
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0886
http://www.gentoo.org/security/en/glsa/glsa-200410-11.xml


Solution:
All PDFlib users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/pdflib-5.0.4_p1"


Risk factor : Medium