Xpdf “Splash.cc” Splash图形处理堆溢出漏洞

漏洞信息详情

Xpdf “Splash.cc” Splash图形处理堆溢出漏洞

• CNNVD编号：CNNVD-200601-364
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2006-0301
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2006-01-30
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2007-02-07
  
• 厂        商：
  
  xpdf
• 漏洞来源：
  Dirk Mueller muel…

Xpdf是便携文档格式(PDF)文件的开放源码浏览器。

Xpdf在处理畸形的splash图形文件时存在漏洞，攻击者可能利用此漏洞在用户机器上执行任意指令。Xpdf在处理畸形splash图形时，相关的\”splash/Splash.cc\”代码中存在堆溢出漏洞，可能导致生成超出相关位图的\”width\”或\”height\”的值。远程攻击者可以诱骗用户打开恶意的文档导致执行任意代码。

来源: XF

名称: xpdf-splash-bo(24391)

链接:http://xforce.iss.net/xforce/xfdb/24391

来源: UBUNTU

名称: USN-249-1

链接:http://www.ubuntu.com/usn/usn-249-1

来源: FEDORA

名称: FLSA:175404

链接:http://www.securityfocus.com/archive/1/archive/1/427990/100/0/threaded

来源: BUGTRAQ

名称: 20060202 [KDE Security Advisory] kpdf/xpdf heap based buffer overflow

链接:http://www.securityfocus.com/archive/1/423899/100/0/threaded

来源: REDHAT

名称: RHSA-2006:0201

链接:http://www.redhat.com/support/errata/RHSA-2006-0201.html

来源: FEDORA

名称: FEDORA-2006-103

链接:http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00039.html

来源: MISC

链接:http://www.kde.org/info/security/advisory-20060202-1.txt

来源: GENTOO

名称: GLSA-200602-12

链接:http://www.gentoo.org/security/en/glsa/glsa-200602-12.xml

来源: GENTOO

名称: GLSA-200602-05

链接:http://www.gentoo.org/security/en/glsa/glsa-200602-05.xml

来源: GENTOO

名称: GLSA-200602-04

链接:http://www.gentoo.org/security/en/glsa/glsa-200602-04.xml

来源: VUPEN

名称: ADV-2006-0422

链接:http://www.frsirt.com/english/advisories/2006/0422

来源: VUPEN

名称: ADV-2006-0389

链接:http://www.frsirt.com/english/advisories/2006/0389

来源: DEBIAN

名称: DSA-974

链接:http://www.debian.org/security/2006/dsa-974

来源: DEBIAN

名称: DSA-972

链接:http://www.debian.org/security/2006/dsa-972

来源: DEBIAN

名称: DSA-971

链接:http://www.debian.org/security/2006/dsa-971

来源: SLACKWARE

名称: SSA:2006-045-04

链接:http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747

来源: SLACKWARE

名称: SSA:2006-045-09

链接:http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683

来源: SECTRACK

名称: 1015576

链接:http://securitytracker.com/id?1015576

来源: SECUNIA

名称: 19377

链接:http://secunia.com/advisories/19377

来源: SECUNIA

名称: 18983

链接:http://secunia.com/advisories/18983

来源: SECUNIA

名称: 18913

链接:http://secunia.com/advisories/18913

来源: SECUNIA

名称: 18908

链接:http://secunia.com/advisories/18908

来源: SECUNIA

名称: 18882

链接:http://secunia.com/advisories/18882

来源: SECUNIA

名称: 18864

链接:http://secunia.com/advisories/18864

来源: SECUNIA

名称: 18862

链接:http://secunia.com/advisories/18862

来源: SECUNIA

名称: 18860

链接:http://secunia.com/advisories/18860

来源: SECUNIA

名称: 18839

链接:http://secunia.com/advisories/18839

来源: SECUNIA

名称: 18838

链接:http://secunia.com/advisories/18838

来源: SECUNIA

名称: 18837

链接:http://secunia.com/advisories/18837

来源: SECUNIA

名称: 18834

链接:http://secunia.com/advisories/18834

来源: SECUNIA

名称: 18826

链接:http://secunia.com/advisories/18826

来源: SECUNIA

名称: 18825

链接:http://secunia.com/advisories/18825

来源: SECUNIA

名称: 18707

链接:http://secunia.com/advisories/18707

来源: SECUNIA

名称: 18677

链接:http://secunia.com/advisories/18677

来源: REDHAT

名称: RHSA-2006:0206

链接:http://rhn.redhat.com/errata/RHSA-2006-0206.html

来源: SCO

名称: SCOSA-2006.15

链接:ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt

来源: MISC

链接:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179046

来源: bugzilla.novell.com

链接:https://bugzilla.novell.com/show_bug.cgi?id=141242

来源: SECUNIA

名称: 18875

链接:http://secunia.com/advisories/18875

来源: SECUNIA

名称: 18274

链接:http://secunia.com/advisories/18274

来源: MANDRIVA

名称: MDKSA-2006:032

链接:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:032

来源: MANDRIVA

名称: MDKSA-2006:031

链接:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:031

来源: MANDRIVA

名称: MDKSA-2006:030

链接:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:030

来源: MANDRIVA

名称: MDKSA-2006:032

链接:http://www.mandriva.com/security/advisories?name=MDKSA-2006:032

来源: MANDRIVA

名称: MDKSA-2006:031

链接:http://www.mandriva.com/security/advisories?name=MDKSA-2006:031

来源: MANDRIVA

名称: MDKSA-2006:030

链接:http://www.mandriva.com/security/advisories?name=MDKSA-2006:030

来源: SREASON

名称: 470

链接:http://securityreason.com/securityalert/470