Vulnerability Scanning Solutions, LLC.
Our Process
What We Scan For
Sample Report
Client List
Contact Us
What We Scan For
Family: Ubuntu Local Security Checks --> Category: infos

USN236-1 : xpdf, poppler, cupsys, tetex-bin vulnerabilities Vulnerability Scan

Vulnerability Scan Summary
xpdf, poppler, cupsys, tetex-bin vulnerabilities

Detailed Explanation for this Vulnerability Test

Synopsis :

These remote packages are missing security patches :
- cupsys
- cupsys-bsd
- cupsys-client
- libcupsimage2
- libcupsimage2-dev
- libcupsys2-dev
- libcupsys2-gnutls10
- libkpathsea-dev
- libkpathsea3
- libpoppler-dev
- libpoppler-glib-dev
- libpoppler-qt-dev
- libpoppler0c2
- libpoppler0c2-glib
- libpoppler0c2-qt
- poppler-utils
- tetex-bin
- xpdf
- xpdf-common
- xpdf-reader
- xpdf-utils

Description :

Chris Evans discovered several integer overflows in the XPDF code,
which is present in xpdf, the Poppler library, and tetex-bin. By
tricking an user into opening a specially crafted PDF file, an
attacker could exploit this to execute arbitrary code with the
rights of the application that processes the document.

The CUPS printing system also uses XPDF code to convert PDF files to
PostScript. By attempting to print such a crafted PDF file, a remote
attacker could execute arbitrary code with the rights of the
printer server (user 'cupsys').

Solution :

Upgrade to :
- cupsys-1.1.20final+cvs20040330-4ubuntu16.10 (Ubuntu 4.10)
- cupsys-bsd-1.1.20final+cvs20040330-4ubuntu16.10 (Ubuntu 4.10)
- cupsys-client-1.1.20final+cvs20040330-4ubuntu16.10 (Ubuntu 4.10)
- libcupsimage2-1.1.20final+cvs20040330-4ubuntu16.10 (Ubuntu 4.10)
- libcupsimage2-dev-1.1.20final+cvs20040330-4ubuntu16.10 (Ubuntu 4.10)
- libcupsys2-dev-1.1.20final+cvs20040330-4ubuntu16.10 (Ubuntu 4.10)
- libcupsys2-gnutls10-1.1.20final+cvs20040330-4ubuntu16.10 (Ubuntu 4.10)
- libkpathsea-dev-2.0.2-30u

Threat Level: High

Click HERE for more information and discussions on this network vulnerability scan.


P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.