oval:org.mitre.oval:def:23546

Definition Id: oval:org.mitre.oval:def:23546
 
Oval ID: oval:org.mitre.oval:def:23546
Title: ELSA-2010:0859: poppler security update (Important)
Description: The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
Family: unix Class: patch
Reference(s): ELSA-2010:0859-03
CVE-2010-3702
CVE-2010-3703
CVE-2010-3704
Version: 17
Platform(s): Oracle Linux 6
Product(s): poppler
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:16594
 
Oval ID: oval:org.mitre.oval:def:16594
Title: Oracle Linux 6.x
Description: The operating system installed on the system is Oracle Linux 6.x
Family: unix Class: inventory
Reference(s): cpe:/o:oracle:linux:6
Version: 5
Platform(s): Oracle Linux 6
Product(s):
Definition Synopsis:
Referenced By:
oval:org.mitre.oval:def:23546