MDVSA-2009:231-1 -- Mandriva htmldocID: oval:org.secpod.oval:def:300468 | Date: (C)2012-01-07 (M)2021-06-02 |
Class: PATCH | Family: unix |
A security vulnerability has been identified and fixed in htmldoc: Buffer overflow in the set_page_size function in util.cxx in HTMLDOC 1.8.27 and earlier allows context-dependent attackers to execute arbitrary code via a long MEDIA SIZE comment. NOTE: it was later reported that there were additional vectors in htmllib.cxx and ps-pdf.cxx using an AFM font file with a long glyph name, but these vectors do not cross privilege boundaries . This update provides a solution to this vulnerability. Update: Packages for 2008.0 are being provided due to extended support for Corporate products.
Platform: |
Mandriva Linux 2008.0 |