Bug 179424 - CVE-2006-0301 PDF splash handling heap overflow (FC5 test2)
Summary: CVE-2006-0301 PDF splash handling heap overflow (FC5 test2)
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: poppler
Version: 5
Hardware: All
OS: Linux
medium
high
Target Milestone: ---
Assignee: Kristian Høgsberg
QA Contact:
URL:
Whiteboard: impact=important,reported=20060126,so...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2006-01-31 08:25 UTC by Mark J. Cox
Modified: 2007-11-30 22:11 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2006-02-09 20:23:29 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Mark J. Cox 2006-01-31 08:25:59 UTC
+++ This bug was initially created as a clone of Bug #179054 +++

PDF splash handling heap overflow

Dirk Mueller told vendor-sec about a buffer overflow issue in the xpdf
codebase when handling splash images.

The proposed patch is attachment 123745 [details]

-- Additional comment from bressers on 2006-01-26 16:28 EST --
There is a repoducer for this issue in attachment 123746 [details]

Comment 1 Mark J. Cox 2006-02-06 09:22:31 UTC
ping!  if fixed in rawhide please close this bug, otherwise please try to fix
this before FC5Test3 (Feb 13)



Comment 2 Kristian Høgsberg 2006-02-09 20:23:29 UTC
This bug doesn't affect the rawhide build of poppler.  In rawhide, poppler use
the cairo rendering backend, so the problem doesn't affect that build.


Note You need to log in before you can comment on or make changes to this bug.