USN-603-2: KOffice vulnerability
17 April 2008
- koffice -
USN-603-1 fixed vulnerabilities in poppler. This update provides the
corresponding updates for KWord, part of KOffice.
Original advisory details:
It was discovered that the poppler PDF library did not correctly handle
certain malformed embedded fonts. If a user or an automated system were
tricked into opening a malicious PDF, a remote attacker could execute
arbitrary code with user privileges.
The problem can be corrected by updating your system to the following package versions:
After a standard system upgrade you need to restart KWord to effect
the necessary changes.
- USN-603-1: libpoppler1, poppler, libpoppler2