• info
• discussion
• exploit
• solution
• references

Poppler 'create_surface_from_thumbnail_data()' Integer Overflow Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 5.0 alpha

• Debian libpoppler-dev_0.8.7-3_alpha.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-dev_ 0.8.7-3_alpha.deb


• Debian libpoppler-glib-dev_0.8.7-3_alpha.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-glib -dev_0.8.7-3_alpha.deb


• Debian libpoppler-glib3_0.8.7-3_alpha.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-glib 3_0.8.7-3_alpha.deb


• Debian libpoppler-qt-dev_0.8.7-3_alpha.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt-d ev_0.8.7-3_alpha.deb


• Debian libpoppler-qt2_0.8.7-3_alpha.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt2_ 0.8.7-3_alpha.deb


• Debian libpoppler-qt4-3_0.8.7-3_alpha.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt4- 3_0.8.7-3_alpha.deb


• Debian libpoppler-qt4-dev_0.8.7-3_alpha.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt4- dev_0.8.7-3_alpha.deb


• Debian libpoppler3_0.8.7-3_alpha.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler3_0.8 .7-3_alpha.deb


• Debian poppler-dbg_0.8.7-3_alpha.deb
  http://security.debian.org/pool/updates/main/p/poppler/poppler-dbg_0.8 .7-3_alpha.deb


• Debian poppler-utils_0.8.7-3_alpha.deb
  http://security.debian.org/pool/updates/main/p/poppler/poppler-utils_0 .8.7-3_alpha.deb

Mandriva Linux Mandrake 2008.0

• Mandriva libpoppler-glib-devel-0.8.7-2.4mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpoppler-qt-devel-0.8.7-2.4mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpoppler-qt4-3-0.8.7-2.4mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpoppler-qt4-devel-0.8.7-2.4mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpoppler3-0.8.7-2.4mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 armel

• Debian libpoppler-dev_0.8.7-3_armel.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-dev_ 0.8.7-3_armel.deb


• Debian libpoppler-glib-dev_0.8.7-3_armel.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-glib -dev_0.8.7-3_armel.deb


• Debian libpoppler-glib3_0.8.7-3_armel.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-glib 3_0.8.7-3_armel.deb


• Debian libpoppler-qt-dev_0.8.7-3_armel.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt-d ev_0.8.7-3_armel.deb


• Debian libpoppler-qt2_0.8.7-3_armel.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt2_ 0.8.7-3_armel.deb


• Debian libpoppler-qt4-3_0.8.7-3_armel.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt4- 3_0.8.7-3_armel.deb


• Debian libpoppler-qt4-dev_0.8.7-3_armel.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt4- dev_0.8.7-3_armel.deb


• Debian libpoppler3_0.8.7-3_armel.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler3_0.8 .7-3_armel.deb


• Debian poppler-dbg_0.8.7-3_armel.deb
  http://security.debian.org/pool/updates/main/p/poppler/poppler-dbg_0.8 .7-3_armel.deb


• Debian poppler-utils_0.8.7-3_armel.deb
  http://security.debian.org/pool/updates/main/p/poppler/poppler-utils_0 .8.7-3_armel.deb

Debian Linux 5.0 mips

• Debian libpoppler-dev_0.8.7-3_mips.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-dev_ 0.8.7-3_mips.deb


• Debian libpoppler-glib-dev_0.8.7-3_mips.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-glib -dev_0.8.7-3_mips.deb


• Debian libpoppler-glib3_0.8.7-3_mips.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-glib 3_0.8.7-3_mips.deb


• Debian libpoppler-qt-dev_0.8.7-3_mips.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt-d ev_0.8.7-3_mips.deb


• Debian libpoppler-qt2_0.8.7-3_mips.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt2_ 0.8.7-3_mips.deb


• Debian libpoppler-qt4-3_0.8.7-3_mips.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt4- 3_0.8.7-3_mips.deb


• Debian libpoppler-qt4-dev_0.8.7-3_mips.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt4- dev_0.8.7-3_mips.deb


• Debian libpoppler3_0.8.7-3_mips.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler3_0.8 .7-3_mips.deb


• Debian poppler-dbg_0.8.7-3_mips.deb
  http://security.debian.org/pool/updates/main/p/poppler/poppler-dbg_0.8 .7-3_mips.deb


• Debian poppler-utils_0.8.7-3_mips.deb
  http://security.debian.org/pool/updates/main/p/poppler/poppler-utils_0 .8.7-3_mips.deb

Debian Linux 5.0 sparc

• Debian libpoppler-dev_0.8.7-3_sparc.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-dev_ 0.8.7-3_sparc.deb


• Debian libpoppler-glib-dev_0.8.7-3_sparc.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-glib -dev_0.8.7-3_sparc.deb


• Debian libpoppler-glib3_0.8.7-3_sparc.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-glib 3_0.8.7-3_sparc.deb


• Debian libpoppler-qt-dev_0.8.7-3_sparc.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt-d ev_0.8.7-3_sparc.deb


• Debian libpoppler-qt2_0.8.7-3_sparc.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt2_ 0.8.7-3_sparc.deb


• Debian libpoppler-qt4-3_0.8.7-3_sparc.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt4- 3_0.8.7-3_sparc.deb


• Debian libpoppler-qt4-dev_0.8.7-3_sparc.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt4- dev_0.8.7-3_sparc.deb


• Debian libpoppler3_0.8.7-3_sparc.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler3_0.8 .7-3_sparc.deb


• Debian poppler-dbg_0.8.7-3_sparc.deb
  http://security.debian.org/pool/updates/main/p/poppler/poppler-dbg_0.8 .7-3_sparc.deb


• Debian poppler-utils_0.8.7-3_sparc.deb
  http://security.debian.org/pool/updates/main/p/poppler/poppler-utils_0 .8.7-3_sparc.deb

Debian Linux 5.0 s/390

• Debian libpoppler-dev_0.8.7-3_s390.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-dev_ 0.8.7-3_s390.deb


• Debian libpoppler-glib-dev_0.8.7-3_s390.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-glib -dev_0.8.7-3_s390.deb


• Debian libpoppler-glib3_0.8.7-3_s390.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-glib 3_0.8.7-3_s390.deb


• Debian libpoppler-qt-dev_0.8.7-3_s390.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt-d ev_0.8.7-3_s390.deb


• Debian libpoppler-qt2_0.8.7-3_s390.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt2_ 0.8.7-3_s390.deb


• Debian libpoppler-qt4-3_0.8.7-3_s390.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt4- 3_0.8.7-3_s390.deb


• Debian libpoppler-qt4-dev_0.8.7-3_s390.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt4- dev_0.8.7-3_s390.deb


• Debian libpoppler3_0.8.7-3_s390.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler3_0.8 .7-3_s390.deb


• Debian poppler-dbg_0.8.7-3_s390.deb
  http://security.debian.org/pool/updates/main/p/poppler/poppler-dbg_0.8 .7-3_s390.deb


• Debian poppler-utils_0.8.7-3_s390.deb
  http://security.debian.org/pool/updates/main/p/poppler/poppler-utils_0 .8.7-3_s390.deb

Debian Linux 5.0 hppa

• Debian libpoppler-dev_0.8.7-3_hppa.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-dev_ 0.8.7-3_hppa.deb


• Debian libpoppler-glib-dev_0.8.7-3_hppa.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-glib -dev_0.8.7-3_hppa.deb


• Debian libpoppler-glib3_0.8.7-3_hppa.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-glib 3_0.8.7-3_hppa.deb


• Debian libpoppler-qt-dev_0.8.7-3_hppa.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt-d ev_0.8.7-3_hppa.deb


• Debian libpoppler-qt2_0.8.7-3_hppa.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt2_ 0.8.7-3_hppa.deb


• Debian libpoppler-qt4-3_0.8.7-3_hppa.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt4- 3_0.8.7-3_hppa.deb


• Debian libpoppler-qt4-dev_0.8.7-3_hppa.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt4- dev_0.8.7-3_hppa.deb


• Debian libpoppler3_0.8.7-3_hppa.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler3_0.8 .7-3_hppa.deb


• Debian poppler-dbg_0.8.7-3_hppa.deb
  http://security.debian.org/pool/updates/main/p/poppler/poppler-dbg_0.8 .7-3_hppa.deb


• Debian poppler-utils_0.8.7-3_hppa.deb
  http://security.debian.org/pool/updates/main/p/poppler/poppler-utils_0 .8.7-3_hppa.deb

Debian Linux 5.0 ia-64

• Debian libpoppler-dev_0.8.7-3_ia64.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-dev_ 0.8.7-3_ia64.deb


• Debian libpoppler-glib-dev_0.8.7-3_ia64.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-glib -dev_0.8.7-3_ia64.deb


• Debian libpoppler-glib3_0.8.7-3_ia64.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-glib 3_0.8.7-3_ia64.deb


• Debian libpoppler-qt-dev_0.8.7-3_ia64.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt-d ev_0.8.7-3_ia64.deb


• Debian libpoppler-qt2_0.8.7-3_ia64.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt2_ 0.8.7-3_ia64.deb


• Debian libpoppler-qt4-3_0.8.7-3_ia64.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt4- 3_0.8.7-3_ia64.deb


• Debian libpoppler-qt4-dev_0.8.7-3_ia64.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler-qt4- dev_0.8.7-3_ia64.deb


• Debian libpoppler3_0.8.7-3_ia64.deb
  http://security.debian.org/pool/updates/main/p/poppler/libpoppler3_0.8 .7-3_ia64.deb


• Debian poppler-dbg_0.8.7-3_ia64.deb
  http://security.debian.org/pool/updates/main/p/poppler/poppler-dbg_0.8 .7-3_ia64.deb


• Debian poppler-utils_0.8.7-3_ia64.deb
  http://security.debian.org/pool/updates/main/p/poppler/poppler-utils_0 .8.7-3_ia64.deb