488292 – (CVE-2010-5110) <app-text/poppler-0.14.1: corrupted jpeg stream in corrupted document crashes poppler (CVE-2010-5110)

Bug 488292 (CVE-2010-5110) - <app-text/poppler-0.14.1: corrupted jpeg stream in corrupted document crashes poppler (CVE-2010-5110)

Summary: <app-text/poppler-0.14.1: corrupted jpeg stream in corrupted document crashes...

Status:	RESOLVED FIXED

Alias:	CVE-2010-5110

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal normal
Assignee:	Gentoo Security

URL:
Whiteboard:	A3 [noglsa]
Keywords:

Depends on:
Blocks:

Reported:	2013-10-16 20:40 UTC by Agostino Sarubbo
Modified:	2013-10-16 21:23 UTC (History)
CC List:	2 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Agostino Sarubbo gentoo-dev

2013-10-16 20:40:03 UTC

Reference:

https://bugs.freedesktop.org/show_bug.cgi?id=26280

http://cgit.freedesktop.org/poppler/poppler/commit/poppler/DCTStream.cc?id=fc071d800cb4329a3ccf898d7bf16b4db7323ad8

http://www.openwall.com/lists/oss-security/2013/10/14/3

Comment 1 Sean Amoss (RETIRED) gentoo-dev

2013-10-16 21:23:21 UTC

Users have already been advised to update in GLSA 201310-03.