CVE ID:	CVE-2008-1693
Description:	The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, related to dereferencing a function pointer associated with the type of this font object.
Test IDs:	1.3.6.1.4.1.25623.1.0.62038   1.3.6.1.4.1.25623.1.0.62033   1.3.6.1.4.1.25623.1.0.60832   1.3.6.1.4.1.25623.1.0.62149   1.3.6.1.4.1.25623.1.0.65997   1.3.6.1.4.1.25623.1.0.60747   1.3.6.1.4.1.25623.1.0.60831   1.3.6.1.4.1.25623.1.0.61626   1.3.6.1.4.1.25623.1.0.60795   1.3.6.1.4.1.25623.1.0.840342   1.3.6.1.4.1.25623.1.0.60746   1.3.6.1.4.1.25623.1.0.62032   1.3.6.1.4.1.25623.1.0.122594   1.3.6.1.4.1.25623.1.0.65811   1.3.6.1.4.1.25623.1.0.65443   1.3.6.1.4.1.25623.1.0.61416   1.3.6.1.4.1.25623.1.0.61628   1.3.6.1.4.1.25623.1.0.60748   1.3.6.1.4.1.25623.1.0.60899   1.3.6.1.4.1.25623.1.0.60751   1.3.6.1.4.1.25623.1.0.60907   1.3.6.1.4.1.25623.1.0.840196   1.3.6.1.4.1.25623.1.0.61281   1.3.6.1.4.1.25623.1.0.60818
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1693 BugTraq ID: 28830 http://www.securityfocus.com/bid/28830 Debian Security Information: DSA-1548 (Google Search) http://www.debian.org/security/2008/dsa-1548 Debian Security Information: DSA-1606 (Google Search) http://www.debian.org/security/2008/dsa-1606 https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00522.html http://security.gentoo.org/glsa/glsa-200804-18.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:089 http://www.mandriva.com/security/advisories?name=MDVSA-2008:173 http://www.mandriva.com/security/advisories?name=MDVSA-2008:197 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11226 RedHat Security Advisories: RHSA-2008:0238 http://www.redhat.com/support/errata/RHSA-2008-0238.html RedHat Security Advisories: RHSA-2008:0239 http://www.redhat.com/support/errata/RHSA-2008-0239.html RedHat Security Advisories: RHSA-2008:0240 http://www.redhat.com/support/errata/RHSA-2008-0240.html RedHat Security Advisories: RHSA-2008:0262 http://www.redhat.com/support/errata/RHSA-2008-0262.html http://securitytracker.com/id?1019893 http://secunia.com/advisories/29816 http://secunia.com/advisories/29834 http://secunia.com/advisories/29836 http://secunia.com/advisories/29851 http://secunia.com/advisories/29853 http://secunia.com/advisories/29868 http://secunia.com/advisories/29869 http://secunia.com/advisories/29884 http://secunia.com/advisories/29885 http://secunia.com/advisories/30019 http://secunia.com/advisories/30033 http://secunia.com/advisories/30717 http://secunia.com/advisories/31035 SuSE Security Announcement: SUSE-SR:2008:011 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html SuSE Security Announcement: SUSE-SR:2008:013 (Google Search) http://www.novell.com/linux/security/advisories/2008_13_sr.html http://www.ubuntu.com/usn/usn-603-1 http://www.ubuntu.com/usn/usn-603-2 http://www.vupen.com/english/advisories/2008/1265/references http://www.vupen.com/english/advisories/2008/1266/references XForce ISS Database: xpdf-pdf-code-execution(41884) https://exchange.xforce.ibmcloud.com/vulnerabilities/41884