REDHAT-BUG-495894: Low severity xpdf vulnerability
Multiple NULL derefernce flaws were found in xpdf's JBIG2 decoder. A carefully crafted PDF file could cause xpdf to crash when opened.
Will Dormann of the CERT/CC created the extensive testsuite for the JBIG2 decoder in various PDF libraries that found this flaw.
Acknowledgements:
Red Hat would like to thank Will Dormann of the CERT/CC for responsibly reporting these flaws.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-495894?
The severity of REDHAT-BUG-495894 is considered high due to the potential for crashes caused by manipulated PDF files.
How do I fix REDHAT-BUG-495894?
To fix REDHAT-BUG-495894, update Xpdf to the latest version available from Red Hat or your software distributor.
What software is affected by REDHAT-BUG-495894?
The affected software for REDHAT-BUG-495894 is Xpdf, specifically in its JBIG2 decoder.
Can REDHAT-BUG-495894 lead to remote code execution?
No, REDHAT-BUG-495894 does not lead to remote code execution, but it can crash the application when opened.
Is there a workaround for REDHAT-BUG-495894?
Currently, the recommended approach for REDHAT-BUG-495894 is to upgrade the software, as no specific workaround has been provided.