• info
• discussion
• exploit
• solution
• references

Xpdf Multiple Remote Stream.CC Vulnerabilities

Solution:
Please see the referenced advisories for more information and fixes.


Xpdf Xpdf 3.0.1 (Patch 2)

• Xpdf xpdf-3.02pl2.patch
  ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl2.patch

Xpdf Xpdf 3.01

• Debian xpdf-common_3.01-9.1+etch2_all.deb
  Architecture independent
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-common_3.01-9 .1+etch2_all.deb


• Debian xpdf-reader_3.01-9.1+etch2_amd64.deb
  amd64 architecture (AMD x86_64 (AMD64))
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.01-9 .1+etch2_amd64.deb


• Debian xpdf-reader_3.01-9.1+etch2_arm.deb
  arm architecture (ARM)
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.01-9 .1+etch2_arm.deb


• Debian xpdf-reader_3.01-9.1+etch2_hppa.deb
  hppa architecture (HP PA RISC)
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.01-9 .1+etch2_hppa.deb


• Debian xpdf-reader_3.01-9.1+etch2_i386.deb
  i386 architecture (Intel ia32)
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.01-9 .1+etch2_i386.deb


• Debian xpdf-reader_3.01-9.1+etch2_ia64.deb
  ia64 architecture (Intel ia64)
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.01-9 .1+etch2_ia64.deb


• Debian xpdf-reader_3.01-9.1+etch2_mips.deb
  mips architecture (MIPS (Big Endian))
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.01-9 .1+etch2_mips.deb


• Debian xpdf-reader_3.01-9.1+etch2_mipsel.deb
  mipsel architecture (MIPS (Little Endian))
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.01-9 .1+etch2_mipsel.deb


• Debian xpdf-reader_3.01-9.1+etch2_powerpc.deb
  powerpc architecture (PowerPC)
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.01-9 .1+etch2_powerpc.deb


• Debian xpdf-reader_3.01-9.1+etch2_s390.deb
  s390 architecture (IBM S/390)
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.01-9 .1+etch2_s390.deb


• Debian xpdf-reader_3.01-9.1+etch2_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.01-9 .1+etch2_sparc.deb


• Debian xpdf-utils_3.01-9.1+etch2_amd64.deb
  amd64 architecture (AMD x86_64 (AMD64))
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.01-9. 1+etch2_amd64.deb


• Debian xpdf-utils_3.01-9.1+etch2_arm.deb
  arm architecture (ARM)
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.01-9. 1+etch2_arm.deb


• Debian xpdf-utils_3.01-9.1+etch2_hppa.deb
  hppa architecture (HP PA RISC)
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.01-9. 1+etch2_hppa.deb


• Debian xpdf-utils_3.01-9.1+etch2_i386.deb
  i386 architecture (Intel ia32)
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.01-9. 1+etch2_i386.deb


• Debian xpdf-utils_3.01-9.1+etch2_ia64.deb
  ia64 architecture (Intel ia64)
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.01-9. 1+etch2_ia64.deb


• Debian xpdf-utils_3.01-9.1+etch2_mips.deb
  mips architecture (MIPS (Big Endian))
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.01-9. 1+etch2_mips.deb


• Debian xpdf-utils_3.01-9.1+etch2_mipsel.deb
  mipsel architecture (MIPS (Little Endian))
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.01-9. 1+etch2_mipsel.deb


• Debian xpdf-utils_3.01-9.1+etch2_powerpc.deb
  powerpc architecture (PowerPC)
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.01-9. 1+etch2_powerpc.deb


• Debian xpdf-utils_3.01-9.1+etch2_s390.deb
  s390 architecture (IBM S/390)
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.01-9. 1+etch2_s390.deb


• Debian xpdf-utils_3.01-9.1+etch2_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.01-9. 1+etch2_sparc.deb


• Debian xpdf_3.01-9.1+etch2_all.deb
  Architecture independent
  http://security.debian.org/pool/updates/main/x/xpdf/xpdf_3.01-9.1+etch 2_all.deb


• Xpdf xpdf-3.02pl2.patch
  ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl2.patch

Xpdf Xpdf 3.0 1

• Xpdf xpdf-3.02pl2.patch
  ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl2.patch

Xpdf Xpdf 3.0 pl2

• Xpdf xpdf-3.02pl2.patch
  ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl2.patch

Xpdf Xpdf 3.0 pl3

• Xpdf xpdf-3.02pl2.patch
  ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl2.patch

KDE KDE 3.5.5

• KDE post-3.5.5-kdegraphics-CVE-2007-5393.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.5.5-kdegraphics-CVE- 2007-5393.diff