REDHAT-BUG-526915: Integer Overflow

Published Oct 2, 2009

Updated

Integer overflow was discovered in SplashBitmap::SplashBitmap when computing memory allocation requirements. This issue was previously reported as CVE-2009-1188 / bug #495907 and addressed in poppler via gmalloc -> gmallocn change via: http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb2

However, such fix is not sufficient, as overflow can occur even during rowSize calculation.

Splash output device is not present in xpdf 2.x, it's also not in the xpdf code embedded in CUPS or tetex.

Affected Software

2 affected components

Freedesktop poppler

xpdf Xpdf

Event History

Oct 2, 2009

Data Sourced

via Red Hat·01:51 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-526915?

The severity of REDHAT-BUG-526915 is classified as high due to the potential for an integer overflow leading to memory corruption.

How do I fix REDHAT-BUG-526915?

To fix REDHAT-BUG-526915, update to the latest version of Freedesktop poppler or Xpdf that includes the patched code.

What systems are affected by REDHAT-BUG-526915?

REDHAT-BUG-526915 affects systems using Freedesktop poppler and Xpdf versions that do not contain the remediation for this vulnerability.

What is the nature of the vulnerability in REDHAT-BUG-526915?

The nature of the vulnerability in REDHAT-BUG-526915 is an integer overflow that occurs when computing memory allocation when processing bitmap images.

Is there a public exploit for REDHAT-BUG-526915?

As of now, there are no publicly known exploits specifically targeting REDHAT-BUG-526915, but it remains a serious concern due to its potential impact.