SECURITY: GGV has a local buffer overflow when reading corrupted PS and PDF documents.

Severity: Security
Product: ggv
Keywords: ggv ps pdf buffer overflow
References: 
  CAN-2002-0838 
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0838
  RHSA-2002:207-14
    http://rhn.redhat.com/errata/RHSA-2002-207.html

Zen Parse found a local buffer overflow in ggv versions prior to 1.0.2.
Under this vulnerability, an attacker can create a carefully crafted,
malformed PDF or PostScript file that, when viewed using gv, executes
arbitrary commands on the system.

It is recommended that you upgrade to version 1.0.2 or above. You can
always find the latest version in Red Carpet, or you can obtain the
package from our FTP server. The URLs are:

Debian Potato:
ftp://ftp.ximian.com/pub/ximian-gnome/debian-potato-i386/gnome-gv_1.0.2-5.1.ximian.1_i386.deb

Mandrake 8.0
ftp://ftp.ximian.com/pub/ximian-gnome/mandrake-80-i586/ggv-1.0.2-5.1.ximian.1.i586.rpm

Mandrake 8.1
ftp://ftp.ximian.com/pub/ximian-gnome/mandrake-81-i586/ggv-1.0.2-5.1.ximian.1.i586.rpm

Mandrake 8.2
ftp://ftp.ximian.com/pub/ximian-gnome/mandrake-82-i586/ggv-1.0.2-5.1.ximian.1.i586.rpm

Redhat 6.2
ftp://ftp.ximian.com/pub/ximian-gnome/redhat-62-i386/ggv-1.0.2-5.1.ximian.1.i386.rpm

Redhat 7.0
ftp://ftp.ximian.com/pub/ximian-gnome/redhat-70-i386/ggv-1.0.2-5.1.ximian.1.i386.rpm

Redhat 7.1
ftp://ftp.ximian.com/pub/ximian-gnome/redhat-71-i386/ggv-1.0.2-5.1.ximian.1.i386.rpm

Redhat 7.2
ftp://ftp.ximian.com/pub/ximian-gnome/redhat-72-i386/ggv-1.0.2-5.1.ximian.1.i386.rpm

Redhat 7.3
ftp://ftp.ximian.com/pub/ximian-gnome/redhat-73-i386/ggv-1.0.2-5.1.ximian.1.i386.rpm

Solaris 7/8
ftp://ftp.ximian.com/pub/ximian-gnome/solaris-7-sun4/ggv-1.0.2-5.1.ximian.1.sparc.rpm

SuSE 7.1
ftp://ftp.ximian.com/pub/ximian-gnome/suse-71-i386/ggv-1.0.2-5.1.ximian.1.i386.rpm

SuSE 7.2
ftp://ftp.ximian.com/pub/ximian-gnome/suse-72-i386/ggv-1.0.2-5.1.ximian.1.i386.rpm

SuSE 7.3
ftp://ftp.ximian.com/pub/ximian-gnome/suse-73-i386/ggv-1.0.2-5.1.ximian.1.i386.rpm

SuSE 8.0
ftp://ftp.ximian.com/pub/ximian-gnome/suse-80-i386/ggv-1.0.2-5.1.ximian.1.i386.rpm

Yellowdog 2.1
ftp://ftp.ximian.com/pub/ximian-gnome/yellowdog-21-ppc/ggv-1.0.2-5.1.ximian.1.ppc.rpm

Yellowdog 2.2
ftp://ftp.ximian.com/pub/ximian-gnome/yellowdog-22-ppc/ggv-1.0.2-5.1.ximian.1.ppc.rpm




_______________________________________________
updates maillist  -  [email protected]
To unsubscribe from this list, or to change your subscription options, follow the link below:
http://lists.ximian.com/mailman/listinfo/updates