[ GLSA 201310-03 ] Poppler: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: Poppler: Multiple vulnerabilities (GLSA 201310-03)
Severity: normal
Exploitable: remote
Date: October 06, 2013
Bug(s): #263028, #290430, #290464, #308017, #338878, #352581, #459866, #480366
ID: 201310-03

Synopsis

Multiple vulnerabilities have been found in Poppler, some of which
may allow execution of arbitrary code.


Background

Poppler is a cross-platform PDF rendering library originally based on
Xpdf.


Affected Packages

Package: app-text/poppler
Vulnerable: < 0.22.2-r1
Unaffected: >= 0.22.2-r1
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Poppler. Please review
the CVE identifiers referenced below for details.


Impact

A remote attacker could entice a user to open a specially crafted PDF
file, possibly resulting in execution of arbitrary code with the
privileges of the process or a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All Poppler users should upgrade to the latest version: