full-disclosure - [ MDKSA-2007:018 ] - Updated koffice packages fix crafted pdf file vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-Id: <E1H7eHB-0002cw-AM@artemis.annvix.ca>
Date: Thu, 18 Jan 2007 13:54:25 -0700
From: security@...driva.com
To: full-disclosure@...ts.grok.org.uk
Subject: [ MDKSA-2007:018 ] - Updated koffice packages fix
	crafted pdf file vulnerability


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________
 
 Mandriva Linux Security Advisory                         MDKSA-2007:018
 http://www.mandriva.com/security/
 _______________________________________________________________________
 
 Package : koffice
 Date    : January 18, 2007
 Affected: 2007.0
 _______________________________________________________________________
 
 Problem Description:
 
 The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2,
 kpdf in KDE before 3.5.5, and other products, allows remote attackers
 to have an unknown impact, possibly including denial of service
 (infinite loop), arbitrary code execution, or memory corruption, via a
 PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages
 attribute that references an invalid page tree node.

 The updated packages have been patched to correct this problem.
 _______________________________________________________________________

 References:
 
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0104
 _______________________________________________________________________
 
 Updated Packages:
 
 Mandriva Linux 2007.0:
 b1cdf9519f03f701c6e538a90a23caf9  2007.0/i586/koffice-1.5.91-3.3mdv2007.0.i586.rpm
 783305f6c0b3c3cef71d8479fa17a095  2007.0/i586/koffice-karbon-1.5.91-3.3mdv2007.0.i586.rpm
 ff64ba24814230cf14f50e84ddccbb78  2007.0/i586/koffice-kexi-1.5.91-3.3mdv2007.0.i586.rpm
 273e5672aca7b387f879aecbdef48278  2007.0/i586/koffice-kformula-1.5.91-3.3mdv2007.0.i586.rpm
 37d873cba6a9b8fa9d0d6b33a71597e0  2007.0/i586/koffice-kivio-1.5.91-3.3mdv2007.0.i586.rpm
 d961fa397c4a72a034b7baf9e9ecfb9a  2007.0/i586/koffice-koshell-1.5.91-3.3mdv2007.0.i586.rpm
 56592c5a74838446e649c15c48fe8853  2007.0/i586/koffice-kplato-1.5.91-3.3mdv2007.0.i586.rpm
 4ebfda9a175e07de07ee197707434a5d  2007.0/i586/koffice-kpresenter-1.5.91-3.3mdv2007.0.i586.rpm
 064db7d95802e559144bfa5b9c408bb7  2007.0/i586/koffice-krita-1.5.91-3.3mdv2007.0.i586.rpm
 70fa6928e34a9ebcbd0359763695d791  2007.0/i586/koffice-kspread-1.5.91-3.3mdv2007.0.i586.rpm
 1dca8ca1061a329290251bda492cb8c4  2007.0/i586/koffice-kugar-1.5.91-3.3mdv2007.0.i586.rpm
 a4bc6a10e43743f46cbc05173e325484  2007.0/i586/koffice-kword-1.5.91-3.3mdv2007.0.i586.rpm
 cf559afa4445ba333ac23062026ab76d  2007.0/i586/koffice-progs-1.5.91-3.3mdv2007.0.i586.rpm
 57049355d5b9d28a540a36e9d37ea3f9  2007.0/i586/libkoffice2-karbon-1.5.91-3.3mdv2007.0.i586.rpm
 c28ab56ff8bc4bafb8256321ad11f69c  2007.0/i586/libkoffice2-karbon-devel-1.5.91-3.3mdv2007.0.i586.rpm
 dc4e1ac6a0d357a574d1d8f837e2b485  2007.0/i586/libkoffice2-kexi-1.5.91-3.3mdv2007.0.i586.rpm
 305b86ad6ca9d684839308b9326ccb55  2007.0/i586/libkoffice2-kexi-devel-1.5.91-3.3mdv2007.0.i586.rpm
 f1011e0ad3d2783b5d01742736e3bbcc  2007.0/i586/libkoffice2-kformula-1.5.91-3.3mdv2007.0.i586.rpm
 4fe66ee781ad6cd648cfa705dc6e1dbc  2007.0/i586/libkoffice2-kformula-devel-1.5.91-3.3mdv2007.0.i586.rpm
 4a937f22adff9c856700f208438132cc  2007.0/i586/libkoffice2-kivio-1.5.91-3.3mdv2007.0.i586.rpm
 520258316a44dfbf6c13c7d7b96d5504  2007.0/i586/libkoffice2-kivio-devel-1.5.91-3.3mdv2007.0.i586.rpm
 f62280e2ab006729efc6a4af379e6a23  2007.0/i586/libkoffice2-koshell-1.5.91-3.3mdv2007.0.i586.rpm
 036045cae6863b7872c20ab4d1cc5688  2007.0/i586/libkoffice2-kplato-1.5.91-3.3mdv2007.0.i586.rpm
 1e86cd4131a0b228c18209194719e672  2007.0/i586/libkoffice2-kpresenter-1.5.91-3.3mdv2007.0.i586.rpm
 6d4129270a176cc103efd3d3af77fb86  2007.0/i586/libkoffice2-kpresenter-devel-1.5.91-3.3mdv2007.0.i586.rpm
 c593f3e2688aaba40c43c33e9d7105ea  2007.0/i586/libkoffice2-krita-1.5.91-3.3mdv2007.0.i586.rpm
 4650aaedeb219009e13a714776ed306d  2007.0/i586/libkoffice2-krita-devel-1.5.91-3.3mdv2007.0.i586.rpm
 1a9d2cb47aa3ee4766c58c7dab59e5d8  2007.0/i586/libkoffice2-kspread-1.5.91-3.3mdv2007.0.i586.rpm
 6aaec493fd2d9893028846f4f8e21462  2007.0/i586/libkoffice2-kspread-devel-1.5.91-3.3mdv2007.0.i586.rpm
 e440b2660d6c6a30dfe1a0f916f28710  2007.0/i586/libkoffice2-kugar-1.5.91-3.3mdv2007.0.i586.rpm
 34848cf4d92ab20936380a0b1848b87c  2007.0/i586/libkoffice2-kugar-devel-1.5.91-3.3mdv2007.0.i586.rpm
 1d8d0aa310a11a28afd0372e04dcf3d1  2007.0/i586/libkoffice2-kword-1.5.91-3.3mdv2007.0.i586.rpm
 e141aae296f1ea77ad8ba8e911035a6f  2007.0/i586/libkoffice2-kword-devel-1.5.91-3.3mdv2007.0.i586.rpm
 f3b45e02397192707a4717e4796f8e44  2007.0/i586/libkoffice2-progs-1.5.91-3.3mdv2007.0.i586.rpm
 45ee5c8cb61a7be6802ab927c15fcc45  2007.0/i586/libkoffice2-progs-devel-1.5.91-3.3mdv2007.0.i586.rpm 
 2dcb5c2b4e73e2213718164f97fb4877  2007.0/SRPMS/koffice-1.5.91-3.3mdv2007.0.src.rpm

 Mandriva Linux 2007.0/X86_64:
 837b0881b72c5b853532dd2502d0ff7a  2007.0/x86_64/koffice-1.5.91-3.3mdv2007.0.x86_64.rpm
 33728635d9a94f6b7231f2a80ddb50ae  2007.0/x86_64/koffice-karbon-1.5.91-3.3mdv2007.0.x86_64.rpm
 c76e8403a507ebc8f249f6f2334935dd  2007.0/x86_64/koffice-kexi-1.5.91-3.3mdv2007.0.x86_64.rpm
 03d4caf72b433c26678fdc6180b637aa  2007.0/x86_64/koffice-kformula-1.5.91-3.3mdv2007.0.x86_64.rpm
 5d716dac65c438f2397b52544a6e8f38  2007.0/x86_64/koffice-kivio-1.5.91-3.3mdv2007.0.x86_64.rpm
 5686d37d4c3cf9c40ba8e0e2d7f75050  2007.0/x86_64/koffice-koshell-1.5.91-3.3mdv2007.0.x86_64.rpm
 245f05881374b5c0ff96fda584fe0e68  2007.0/x86_64/koffice-kplato-1.5.91-3.3mdv2007.0.x86_64.rpm
 48b03d85d6c565830c984ffa70fe5ed4  2007.0/x86_64/koffice-kpresenter-1.5.91-3.3mdv2007.0.x86_64.rpm
 91babf38de874d98768de64f5151243d  2007.0/x86_64/koffice-krita-1.5.91-3.3mdv2007.0.x86_64.rpm
 905ccf7c609c2dc46051109a92d0b967  2007.0/x86_64/koffice-kspread-1.5.91-3.3mdv2007.0.x86_64.rpm
 b13880c4f3e75fb87c1a06ccebe130c6  2007.0/x86_64/koffice-kugar-1.5.91-3.3mdv2007.0.x86_64.rpm
 1ab02849f6053668c3f32481ac027ff3  2007.0/x86_64/koffice-kword-1.5.91-3.3mdv2007.0.x86_64.rpm
 a19557886617f34e7bc380e2f608182d  2007.0/x86_64/koffice-progs-1.5.91-3.3mdv2007.0.x86_64.rpm
 10e515bedb617b46c0bd0c2201ba0778  2007.0/x86_64/lib64koffice2-karbon-1.5.91-3.3mdv2007.0.x86_64.rpm
 c779557283f634c818b57d673cc0d282  2007.0/x86_64/lib64koffice2-karbon-devel-1.5.91-3.3mdv2007.0.x86_64.rpm
 a52e7d5c03f03954674e955e518ecdda  2007.0/x86_64/lib64koffice2-kexi-1.5.91-3.3mdv2007.0.x86_64.rpm
 6abce5b2c97323df1c34cfbb51c24e8c  2007.0/x86_64/lib64koffice2-kexi-devel-1.5.91-3.3mdv2007.0.x86_64.rpm
 8d3a2a1cbb1778dce5943407ae54ec91  2007.0/x86_64/lib64koffice2-kformula-1.5.91-3.3mdv2007.0.x86_64.rpm
 cb4bc66b2185c02c7f9d63cb5437990a  2007.0/x86_64/lib64koffice2-kformula-devel-1.5.91-3.3mdv2007.0.x86_64.rpm
 74b9c1c5afe1d3bd26d702d002d70201  2007.0/x86_64/lib64koffice2-kivio-1.5.91-3.3mdv2007.0.x86_64.rpm
 84fb2950e93db3274a10a1967b63cfd1  2007.0/x86_64/lib64koffice2-kivio-devel-1.5.91-3.3mdv2007.0.x86_64.rpm
 dce5027826fd5808045a81d54128d6bd  2007.0/x86_64/lib64koffice2-koshell-1.5.91-3.3mdv2007.0.x86_64.rpm
 43139b9b61586d0dde15ca648d4bd1bf  2007.0/x86_64/lib64koffice2-kplato-1.5.91-3.3mdv2007.0.x86_64.rpm
 536c7f344165974e98d24bfa03ad999b  2007.0/x86_64/lib64koffice2-kpresenter-1.5.91-3.3mdv2007.0.x86_64.rpm
 558e2156bd14fe3889e50d128e1b9777  2007.0/x86_64/lib64koffice2-kpresenter-devel-1.5.91-3.3mdv2007.0.x86_64.rpm
 5f1ff30462271fcdbb348be7fdfed67c  2007.0/x86_64/lib64koffice2-krita-1.5.91-3.3mdv2007.0.x86_64.rpm
 d92007f528c1c4bbd5f08e1a372f360f  2007.0/x86_64/lib64koffice2-krita-devel-1.5.91-3.3mdv2007.0.x86_64.rpm
 e4f4608eee0c34b0ea5dbcedfa322e10  2007.0/x86_64/lib64koffice2-kspread-1.5.91-3.3mdv2007.0.x86_64.rpm
 0b9265836827e5519439507505e854ff  2007.0/x86_64/lib64koffice2-kspread-devel-1.5.91-3.3mdv2007.0.x86_64.rpm
 175974918d496b876fb0f153d6325132  2007.0/x86_64/lib64koffice2-kugar-1.5.91-3.3mdv2007.0.x86_64.rpm
 6769a7aa06bc0ef765473806877a74a3  2007.0/x86_64/lib64koffice2-kugar-devel-1.5.91-3.3mdv2007.0.x86_64.rpm
 88578bf2bd7b6a2e2d2e361163ee4d44  2007.0/x86_64/lib64koffice2-kword-1.5.91-3.3mdv2007.0.x86_64.rpm
 d2c14a93ba278c18f12a2366149d24c0  2007.0/x86_64/lib64koffice2-kword-devel-1.5.91-3.3mdv2007.0.x86_64.rpm
 fab8c782b89b43a15df544ef6da61a42  2007.0/x86_64/lib64koffice2-progs-1.5.91-3.3mdv2007.0.x86_64.rpm
 726d9d0df73c3603cbc22a7ac3fdc061  2007.0/x86_64/lib64koffice2-progs-devel-1.5.91-3.3mdv2007.0.x86_64.rpm 
 2dcb5c2b4e73e2213718164f97fb4877  2007.0/SRPMS/koffice-1.5.91-3.3mdv2007.0.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFFr7Q8mqjQ0CJFipgRAotZAJ46508w3im/IvxBRh2tIJqkD9Bb6ACguSRx
nyX+pMyxCoY2znh4Jy7IfhA=
=D46J
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/