| Package | Affected versions | Patched versions |
|---|---|---|
| cups | = 1.1.22= 1.1.22_rc1= 1.1.23= 1.1.23_rc1 | |
| kdegraphics | = 3.2= 3.4.3 | |
| koffice | = 1.4= 1.4.1= 1.4.2 | |
| kpdf | = 3.2= 3.4.3 | |
| kword | = 1.4.2 | |
| poppler | = 0.4.2 | |
| propack | = 3.0 | |
| tetex | = 1.0.7= 2.0= 2.0.1= 2.0.2= 3.0 | |
| xpdf | = 3.0 |
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free