MDVSA-2009:231 -- Mandriva htmldocID: oval:org.secpod.oval:def:300890 | Date: (C)2012-01-07 (M)2021-06-02 |
Class: PATCH | Family: unix |
A security vulnerability has been identified and fixed in htmldoc: Buffer overflow in the set_page_size function in util.cxx in HTMLDOC 1.8.27 and earlier allows context-dependent attackers to execute arbitrary code via a long MEDIA SIZE comment. NOTE: it was later reported that there were additional vectors in htmllib.cxx and ps-pdf.cxx using an AFM font file with a long glyph name, but these vectors do not cross privilege boundaries . This update provides a solution to this vulnerability.
Platform: |
Mandriva Linux 2009.0 |
Mandriva Linux 2009.1 |