CVE-2010-2575, Okular PDB Processing Memory Corruption Vulnerability.
For more infos please take a look at the http://www.kde.org/info/security/advisory-20100825-1.txt

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes a heap-based overflow in okular. The RLE decompression in the TranscribePalmImageToJPEG() function can be exploited to execute arbitrary code with user privileges by providing a crafted PDF file. (CVE-2010-2575).

The remote host is affected by the vulnerability described in GLSA-201311-20 (Okular: Arbitrary code execution)

    Okular contains a heap-based buffer overflow  in the RLE decompression       functionality in the TranscribePalmImageToJPEG function in       generators/plucker/inplug/image.cpp.
  Impact :

    A remote attacker could entice a user to open a specially crafted PBD       file using Okular, possibly resulting in execution of arbitrary code with       the privileges of the process, or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

A vulnerability has been found and corrected in okular (kdegraphics) :

A specially crafted PDF or PS file could cause okular to crash or execute arbitrary code (CVE-2010-2575).

The updated packages have been patched to correct this issue.

Stefan Cornelius of Secunia Research discovered a boundary error during RLE decompression in the 'TranscribePalmImageToJPEG()' function in generators/plucker/inplug/image.cpp of okular when processing images embedded in PDB files, which can be exploited to cause a heap-based buffer overflow. (CVE-2010-2575).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes a heap-based overflow in okular. The RLE decompression in the TranscribePalmImageToJPEG() function can be exploited to execute arbitrary code with user privileges by providing a crafted PDF file. (CVE-2010-2575)

New kdegraphics packages are available for Slackware 13.1 to fix a security issue in the okular document viewer.

ID	Name	Product	Family	Published	Updated	Severity
48748	Fedora 14 : kdegraphics-4.5.0-2.fc14 (2010-13589)	Nessus	Fedora Local Security Checks	8/26/2010	1/11/2021	medium
49756	openSUSE Security Update : gwenview (openSUSE-SU-2010:0691-1)	Nessus	SuSE Local Security Checks	10/6/2010	1/14/2021	medium
71122	GLSA-201311-20 : Okular: Arbitrary code execution	Nessus	Gentoo Local Security Checks	11/29/2013	1/6/2021	medium
75524	openSUSE Security Update : gwenview (openSUSE-SU-2010:0691-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/14/2021	medium
49754	openSUSE Security Update : gwenview (openSUSE-SU-2010:0691-1)	Nessus	SuSE Local Security Checks	10/6/2010	1/14/2021	medium
48898	Mandriva Linux Security Advisory : kdegraphics4 (MDVSA-2010:162)	Nessus	Mandriva Local Security Checks	8/27/2010	1/6/2021	medium
48905	Ubuntu 9.04 / 9.10 / 10.04 LTS : kdegraphics vulnerability (USN-979-1)	Nessus	Ubuntu Local Security Checks	8/27/2010	9/19/2019	medium
48916	Fedora 12 : kdegraphics-4.4.5-3.fc12 (2010-13661)	Nessus	Fedora Local Security Checks	8/29/2010	1/11/2021	medium
50920	SuSE 11 Security Update : okular. (SAT Patch Number 3064)	Nessus	SuSE Local Security Checks	12/2/2010	1/14/2021	medium
51602	SuSE 11.1 Security Update : okular (SAT Patch Number 3062)	Nessus	SuSE Local Security Checks	1/21/2011	1/14/2021	medium
48915	Fedora 13 : kdegraphics-4.4.5-3.fc13 (2010-13629)	Nessus	Fedora Local Security Checks	8/29/2010	1/11/2021	medium
54885	Slackware 13.1 : kdegraphics (SSA:2010-240-03)	Nessus	Slackware Local Security Checks	5/28/2011	1/14/2021	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium