Synopsis: Important: xpdf security update
Issue date: 2008-04-17
CVE Names: CVE-2008-1693
Kees Cook discovered a flaw in the way xpdf displayed malformed fonts
embedded in PDF files. An attacker could create a malicious PDF file that
would cause xpdf to crash, or, potentially, execute arbitrary code when
opened. (CVE-2008-1693)
SL 4.x
SRPMS:
xpdf-3.00-16.el4.src.rpm
i386:
xpdf-3.00-16.el4.i386.rpm
x86_64:
xpdf-3.00-16.el4.x86_64.rpm
-Connie Sieh
-Troy Dawson