Mandrake Linux Security Advisory : koffice (MDKSA-2005:019)
High Nessus Plugin ID 16256
SynopsisThe remote Mandrake Linux host is missing one or more security updates.
DescriptionA buffer overflow vulnerability was discovered in the xpdf PDF code, which could allow for arbitrary code execution as the user viewing a PDF file. The vulnerability exists due to insufficient bounds checking while processing a PDF file that provides malicious values in the /Encrypt /Length tag. Koffice uses xpdf code and is susceptible to the same vulnerability.
The updated packages have been patched to prevent these problems.
SolutionUpdate the affected packages.