REDHAT-BUG-789936: Low severity xpdf vulnerability

Published Feb 13, 2012

Updated

An insufficient escape sequences sanitization flaw was found in the way xpdf, a PDF file viewer for the X window system, and poppler, a PDF rendering library, performed sanitization of certain characters to be displayed in the error messages, which arose during presentation of certain PDF files. A remote attacker could use this flaw to modify a window's title, or, possibly execute arbitrary commands or overwrite files, via a specially-crafted PDF file containing an escape sequence for a terminal emulator if local, unsuspecting user opened such crafted PDF file in xpdf or in an application linked against poppler library (for example evince).

Affected Software

2 affected components

xpdf Xpdf

Poppler Poppler

Event History

Feb 13, 2012

Data Sourced

via Red Hat·10:18 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-789936?

The severity of REDHAT-BUG-789936 is considered moderate due to potential impacts on error message display.

How do I fix REDHAT-BUG-789936?

To fix REDHAT-BUG-789936, it is recommended to update xpdf and poppler to the latest patched versions.

What applications are affected by REDHAT-BUG-789936?

REDHAT-BUG-789936 affects xpdf, a PDF viewer, and poppler, a PDF rendering library.

What type of vulnerability is REDHAT-BUG-789936?

REDHAT-BUG-789936 is classified as an insufficient sanitization flaw regarding error messages.

Is there a workaround for REDHAT-BUG-789936?

Currently, the best approach for REDHAT-BUG-789936 is to update the affected software to avoid potential exploitation.