tocsin

Debian/poppler: unknown

Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.

Action: Upgrade poppler to 0.6.2-1 or later.

Affected

introducedfixedlast affected
00.6.2-1-

Fixed versions

0.6.2-1

Sources

published · modified · JSON