Fedora Core 4 : tetex-3.0-9.FC4 (2005-028)

critical Nessus Plugin ID 62250

Synopsis

The remote Fedora Core host is missing a security update.

Description

Several flaws were discovered in the way teTeX processes PDF files. An attacker could construct a carefully crafted PDF file that could cause poppler to crash or possibly execute arbitrary code when opened.

The Common Vulnerabilities and Exposures project assigned the names CVE-2005-3625, CVE-2005-3626, and CVE-2005-3627 to these issues.

This package also updates bindings in texdoc and causes the local texmf tree to be searched first.

Solution

Update the affected packages.

See Also

http://www.nessus.org/u?5ab729f2

Plugin Details

Severity: Critical

ID: 62250

File Name: fedora_2005-028.nasl

Version: Revision: 1.2

Type: local

Agent: unix

Published: 9/24/2012

Updated: 10/1/2012

Supported Sensors: Continuous Assessment, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Critical

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:fedoraproject:fedora_core:4

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 1/12/2006

Reference Information

CVE: CVE-2005-3625, CVE-2005-3626, CVE-2005-3627

FEDORA: 2005-028