Vulnerability Scanning Solutions, LLC.
Home
Our Process
Residential
Corporate
What We Scan For
Sample Report
Client List
Terms
Contact Us
What We Scan For
Family: Ubuntu Local Security Checks --> Category: infos

USN270-1 : kdegraphics, koffice, xpdf, cupsys, poppler, tetex-bin vulnerabilities Vulnerability Scan


Vulnerability Scan Summary
kdegraphics, koffice, xpdf, cupsys, poppler, tetex-bin vulnerabilities

Detailed Explanation for this Vulnerability Test

Synopsis :

These remote packages are missing security patches :
- cupsys
- cupsys-bsd
- cupsys-client
- kamera
- karbon
- kchart
- kcoloredit
- kdegraphics
- kdegraphics-dev
- kdegraphics-doc-html
- kdegraphics-kfile-tests
- kdvi
- kfax
- kformula
- kgamma
- kghostview
- kiconedit
- kivio
- kivio-data
- kmrml
- koffice
- koffice-data
- koffice-dev
- koffice-doc-html
- koffice-libs
- kolourpaint
- kooka
- koshell
- kpdf
- kpovmodeler
- kpresenter
- krita
- kruler
- ksnapshot
- kspre
[...]

Description :

Derek Noonburg discovered several integer overflows in the XPDF code,
which is present in xpdf, the Poppler library, and tetex-bin. By
tricking an user into opening a specially crafted PDF file, an
attacker could exploit this to execute arbitrary code with the
rights of the application that processes the document.

The CUPS printing system also uses XPDF code to convert PDF files to
PostScript. By attempting to print such a crafted PDF file, a remote
attacker could execute arbitrary code with the rights of the
printer server (user 'cupsys').

Solution :

Upgrade to :
- cupsys-1.1.20final+cvs20040330-4ubuntu16.11 (Ubuntu 4.10)
- cupsys-bsd-1.1.20final+cvs20040330-4ubuntu16.11 (Ubuntu 4.10)
- cupsys-client-1.1.20final+cvs20040330-4ubuntu16.11 (Ubuntu 4.10)
- kamera-3.4.3-0ubuntu2.5 (Ubuntu 5.10)
- karbon-1.4.1-0ubuntu7.3 (Ubuntu 5.10)
- kchart-1.4.1-0ubuntu7.3 (Ubuntu 5.10)
- kcoloredit-3.4.3-0ubuntu2.5 (Ubuntu 5.10)
- kdegraphics-3.4.3-0ubuntu2.5 (Ubuntu 5.10)
- kdegraphics-dev-3.4.3-0ubuntu2.5 (Ubuntu 5.10)
- kdegraphics-doc-html-3.4.3-0ubuntu2.5 (Ubuntu
[...]


Threat Level: High


Click HERE for more information and discussions on this network vulnerability scan.

VSS, LLC.

P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.