Detections
Analytics
CentOS 4 : gpdf (CESA-2010:0752)
medium Nessus Plugin ID 49811
Language:
Synopsis
The remote CentOS host is missing a security update.Description
An updated gpdf package that fixes two security issues is now available for Red Hat Enterprise Linux 4.The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
GPdf is a viewer for Portable Document Format (PDF) files.
An uninitialized pointer use flaw was discovered in GPdf. An attacker could create a malicious PDF file that, when opened, would cause GPdf to crash or, potentially, execute arbitrary code. (CVE-2010-3702)
An array index error was found in the way GPdf parsed PostScript Type 1 fonts embedded in PDF documents. An attacker could create a malicious PDF file that, when opened, would cause GPdf to crash or, potentially, execute arbitrary code. (CVE-2010-3704)
Users are advised to upgrade to this updated package, which contains backported patches to correct these issues.
Solution
Update the affected gpdf package.See Also
Plugin Details
Severity: Medium
ID: 49811
File Name: centos_RHSA-2010-0752.nasl
Version: 1.11
Type: local
Agent: unix
Family: CentOS Local Security Checks
Published: 10/11/2010
Updated: 1/4/2021
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Agentless Assessment, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: p-cpe:/a:centos:centos:gpdf, cpe:/o:centos:centos:4
Required KB Items: Host/local_checks_enabled, Host/CentOS/release, Host/CentOS/rpm-list
Patch Publication Date: 10/9/2010
Vulnerability Publication Date: 11/5/2010
Reference Information
CVE: CVE-2010-3702, CVE-2010-3703, CVE-2010-3704
RHSA: 2010:0752