kpdf, the KDE pdf viewer, shares code with xpdf. xpdf contains a buffer overflow that can be triggered by a specially crafted PDF file. We reported about xpdf's buffer overflow in our previous article: Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability.
Vulnerable Systems:
* KDE 3.2 up to including KDE 3.2.3
* KDE 3.3 up to including KDE 3.3.2
Impact:
Remotely supplied pdf files can be used to execute arbitrary code on the client machine.
Solution:
Source code patches have been made available that fix these vulnerabilities. Contact your OS vendor / binary package provider for information about how to obtain updated binary packages.
Time line and credits:
21/12/2004 KDE Security Team alerted by Matthias Geerdsen
22/12/2004 Patch from xpdf 3.00pl2 applied to KDE CVS and patches prepared.
23/12/2004 Public disclosure.
