MDVSA-2008:197-1 -- Mandriva kofficeID: oval:org.secpod.oval:def:301500 | Date: (C)2012-01-07 (M)2023-02-13 |
Class: PATCH | Family: unix |
Kees Cook of Ubuntu security found a flaw in how poppler prior to version 0.6 displayed malformed fonts embedded in PDF files. An attacker could create a malicious PDF file that would cause applications using poppler to crash, or possibly execute arbitrary code when opened . This vulnerability also affected KOffice, so the updated packages have been patched to correct this issue. Update: A file conflicts existed between one of the library packages and the koffice-devel package which prevented successful upgrades if koffice-devel was previously installed. This update removes the conflicting file from koffice-devel.
Platform: |
Mandriva Linux 2008.1 |