Joined: 12 May 2004
|Posted: Mon Feb 17, 2014 8:26 pm Post subject: [ GLSA 201402-17 ] Xpdf: User-assisted execution of arbitrar
|Gentoo Linux Security Advisory
Title: Xpdf: User-assisted execution of arbitrary code (GLSA 201402-17)
Exploitable: local, remote
Date: February 17, 2014
Multiple vulnerabilities in Xpdf could result in execution of
Xpdf is an X viewer for PDF files.
Vulnerable: <= 3.02-r4
Architectures: All supported architectures
Multiple vulnerabilities have been discovered in Xpdf. Please review the
CVE identifiers referenced below for details.
A context-dependent attacker could execute arbitrary code or cause a
Denial of Service condition.
There is no known workaround at this time.
Gentoo has discontinued support for Xpdf. We recommend that users
|# emerge --unmerge "app-text/xpdf"