Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - kdegraphics: a boundary error in Okular (CVE-2010-2575)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

This update fixes a heap-based overflow in okular. The RLE decompression in the TranscribePalmImageToJPEG() function can be exploited to execute arbitrary code with user privileges by providing a crafted PDF file. (CVE-2010-2575).

The remote host is affected by the vulnerability described in GLSA-201311-20 (Okular: Arbitrary code execution)

    Okular contains a heap-based buffer overflow  in the RLE decompression       functionality in the TranscribePalmImageToJPEG function in       generators/plucker/inplug/image.cpp.
  Impact :

    A remote attacker could entice a user to open a specially crafted PBD       file using Okular, possibly resulting in execution of arbitrary code with       the privileges of the process, or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

New kdegraphics packages are available for Slackware 13.1 to fix a security issue in the okular document viewer.

This update fixes a heap-based overflow in okular. The RLE decompression in the TranscribePalmImageToJPEG() function can be exploited to execute arbitrary code with user privileges by providing a crafted PDF file. (CVE-2010-2575)

CVE-2010-2575, Okular PDB Processing Memory Corruption Vulnerability.
For more infos please take a look at the http://www.kde.org/info/security/advisory-20100825-1.txt

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Stefan Cornelius of Secunia Research discovered a boundary error during RLE decompression in the 'TranscribePalmImageToJPEG()' function in generators/plucker/inplug/image.cpp of okular when processing images embedded in PDB files, which can be exploited to cause a heap-based buffer overflow. (CVE-2010-2575).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A vulnerability has been found and corrected in okular (kdegraphics) :

A specially crafted PDF or PS file could cause okular to crash or execute arbitrary code (CVE-2010-2575).

The updated packages have been patched to correct this issue.

ID	Name	Product	Family	Severity
199321	RHEL 6 : kdegraphics (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
75524	openSUSE Security Update : gwenview (openSUSE-SU-2010:0691-1)	Nessus	SuSE Local Security Checks	medium
71122	GLSA-201311-20 : Okular: Arbitrary code execution	Nessus	Gentoo Local Security Checks	medium
54885	Slackware 13.1 : kdegraphics (SSA:2010-240-03)	Nessus	Slackware Local Security Checks	medium
51602	SuSE 11.1 Security Update : okular (SAT Patch Number 3062)	Nessus	SuSE Local Security Checks	medium
50920	SuSE 11 Security Update : okular. (SAT Patch Number 3064)	Nessus	SuSE Local Security Checks	medium
49756	openSUSE Security Update : gwenview (openSUSE-SU-2010:0691-1)	Nessus	SuSE Local Security Checks	medium
49754	openSUSE Security Update : gwenview (openSUSE-SU-2010:0691-1)	Nessus	SuSE Local Security Checks	medium
48916	Fedora 12 : kdegraphics-4.4.5-3.fc12 (2010-13661)	Nessus	Fedora Local Security Checks	medium
48915	Fedora 13 : kdegraphics-4.4.5-3.fc13 (2010-13629)	Nessus	Fedora Local Security Checks	medium
48905	Ubuntu 9.04 / 9.10 / 10.04 LTS : kdegraphics vulnerability (USN-979-1)	Nessus	Ubuntu Local Security Checks	medium
48898	Mandriva Linux Security Advisory : kdegraphics4 (MDVSA-2010:162)	Nessus	Mandriva Local Security Checks	medium
48748	Fedora 14 : kdegraphics-4.5.0-2.fc14 (2010-13589)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2010-2575

high

Tenable Plugins

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium