REDHAT-BUG-495899: Low severity xpdf vulnerability
An infinite loop flaw was found in xpdf's JBIG2 MMR decoder. If a carefully crafted PDF file is opened, it could cause xpdf to stop responding.
Will Dormann of the CERT/CC created the extensive testsuite for the JBIG2 decoder in various PDF libraries that found this flaw.
Acknowledgements:
Red Hat would like to thank Will Dormann of the CERT/CC for responsibly reporting this flaw.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-495899?
The severity of REDHAT-BUG-495899 is considered moderate due to the potential for denial of service.
How do I fix REDHAT-BUG-495899?
To fix REDHAT-BUG-495899, update to the latest version of Xpdf provided by your distributor.
What software is affected by REDHAT-BUG-495899?
The software affected by REDHAT-BUG-495899 is Xpdf.
What type of vulnerability is REDHAT-BUG-495899?
REDHAT-BUG-495899 is classified as an infinite loop flaw.
Who discovered the vulnerability identified as REDHAT-BUG-495899?
The vulnerability identified as REDHAT-BUG-495899 was discovered by Will Dormann from CERT/CC.