REDHAT-BUG-495889: Integer Overflow

Published Apr 15, 2009

Updated

An integer overflow flaw was found in xpdf's JBIG2 decoder. This flaw could result in arbitrary code execute with the permissions of the user running xpdf.

Will Dormann of the CERT/CC created the extensive testsuite for the JBIG2 decoder in various PDF libraries that found this flaw.

Acknowledgements:

Red Hat would like to thank Will Dormann of the CERT/CC for responsibly reporting this flaw.

Affected Software

1 affected component

xpdf Xpdf

Event History

Apr 15, 2009

Data Sourced

via Red Hat·01:33 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-495889?

The severity of REDHAT-BUG-495889 is critical due to the potential for arbitrary code execution.

How do I fix REDHAT-BUG-495889?

To fix REDHAT-BUG-495889, you should update to the latest version of xpdf provided by your distribution.

What are the potential impacts of REDHAT-BUG-495889?

The potential impacts of REDHAT-BUG-495889 include unauthorized access and control over the system running xpdf.

Who discovered the REDHAT-BUG-495889 vulnerability?

The REDHAT-BUG-495889 vulnerability was discovered by Will Dormann of CERT/CC.

Is REDHAT-BUG-495889 related to any specific software version?

Yes, REDHAT-BUG-495889 specifically affects the JBIG2 decoder in the xpdf software.