Test ID:	1.3.6.1.4.1.25623.1.0.60795
Category:	Debian Local Security Checks
Title:	Debian Security Advisory DSA 1548-1 (xpdf)
Summary:	The remote host is missing an update to xpdf;announced via advisory DSA 1548-1.
Description:	Summary: The remote host is missing an update to xpdf announced via advisory DSA 1548-1. Vulnerability Insight: Kees Cook discovered a vulnerability in xpdf, set set of tools for display and conversion of Portable Document Format (PDF) files. The Common Vulnerabilities and Exposures project identifies the following problem: CVE-2008-1693 Xpdf's handling of embedded fonts lacks sufficient validation and type checking. If a maliciously-crafted PDF file is opened, the vulnerability may allow the execution of arbitrary code with the privileges of the user running xpdf. For the stable distribution (etch), these problems have been fixed in version 3.01-9.1+etch3. For the unstable distribution (sid), these problems were fixed in version 3.02-1.2. Solution: We recommend that you upgrade your xpdf package. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1693 BugTraq ID: 28830 http://www.securityfocus.com/bid/28830 Debian Security Information: DSA-1548 (Google Search) http://www.debian.org/security/2008/dsa-1548 Debian Security Information: DSA-1606 (Google Search) http://www.debian.org/security/2008/dsa-1606 https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00522.html http://security.gentoo.org/glsa/glsa-200804-18.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:089 http://www.mandriva.com/security/advisories?name=MDVSA-2008:173 http://www.mandriva.com/security/advisories?name=MDVSA-2008:197 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11226 http://www.redhat.com/support/errata/RHSA-2008-0238.html http://www.redhat.com/support/errata/RHSA-2008-0239.html http://www.redhat.com/support/errata/RHSA-2008-0240.html http://www.redhat.com/support/errata/RHSA-2008-0262.html http://securitytracker.com/id?1019893 http://secunia.com/advisories/29816 http://secunia.com/advisories/29834 http://secunia.com/advisories/29836 http://secunia.com/advisories/29851 http://secunia.com/advisories/29853 http://secunia.com/advisories/29868 http://secunia.com/advisories/29869 http://secunia.com/advisories/29884 http://secunia.com/advisories/29885 http://secunia.com/advisories/30019 http://secunia.com/advisories/30033 http://secunia.com/advisories/30717 http://secunia.com/advisories/31035 SuSE Security Announcement: SUSE-SR:2008:011 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html SuSE Security Announcement: SUSE-SR:2008:013 (Google Search) http://www.novell.com/linux/security/advisories/2008_13_sr.html http://www.ubuntu.com/usn/usn-603-1 http://www.ubuntu.com/usn/usn-603-2 http://www.vupen.com/english/advisories/2008/1265/references http://www.vupen.com/english/advisories/2008/1266/references XForce ISS Database: xpdf-pdf-code-execution(41884) https://exchange.xforce.ibmcloud.com/vulnerabilities/41884
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.