Certain patches for kpdf do not include all relevant patches from xpdf that were associated with CVE-2005-3627, which allows context-dependent attackers to exploit vulnerabilities that were present in CVE-2005-3627.

Marcelo Ricardo Leitner noticed that the current patch in DSA 932(CVE-2005-3627 ) for kpdf, the PDF viewer for KDE, does not fix all buffer overflows, still allowing an attacker to execute arbitrary code.

Updated kdegraphics packages that fully resolve a security issue in kpdf are now available.

This update has been rated as having important security impact by the Red Hat Security Response Team.

The kdegraphics packages contain applications for the K Desktop Environment including kpdf, a PDF file viewer.

Marcelo Ricardo Leitner discovered that a kpdf security fix, CVE-2005-3627, was incomplete. Red Hat issued kdegraphics packages with this incomplete fix in RHSA-2005:868. An attacker could construct a carefully crafted PDF file that could cause kpdf to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the name CVE-2006-0746 to this issue.

Users of kpdf should upgrade to these updated packages, which contain a backported patch to resolve this issue.

A new kdegraphics package is available for Slackware 10.1 to fix a security issue. A portion of the recent security patch was missing in the version that was applied to kdegraphics-3.3.2 in Slackware 10.1.
Other versions of Slackware are not affected by this specific missing patch issue.

Marcelo Ricardo Leitner discovered the official published kpdf patches for several previous xpdf vulnerabilities were lacking some hunks published by upstream xpdf. As a result, kpdf is still vulnerable to certain carefully crafted pdf files.

Although previous updates captured most of these changes, this new update picks up some of the missing patches.

The updated packages have been patched to correct these problems.

ID	Name	Product	Family	Severity
22550	Debian DSA-1008-1 : kdegraphics - buffer overflow	Nessus	Debian Local Security Checks	high
21989	CentOS 4 : kdegraphics (CESA-2006:0262)	Nessus	CentOS Local Security Checks	high
21074	Slackware 10.1 : Slackware 10.1 kdegraphics (SSA:2006-072-01)	Nessus	Slackware Local Security Checks	high
21043	RHEL 4 : kdegraphics (RHSA-2006:0262)	Nessus	Red Hat Local Security Checks	high
21037	Mandrake Linux Security Advisory : kdegraphics (MDKSA-2006:054)	Nessus	Mandriva Local Security Checks	high

Detections

Analytics

CVE-2006-0746

critical

Tenable Plugins

high

high

high

high

high