Ubuntu Security Notice USN-979-1 August 27, 2010
kdegraphics vulnerability
CVE-2010-2575
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 9.04
Ubuntu 9.10
Ubuntu 10.04 LTS
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 9.04:
okular 4:4.2.2-0ubuntu2.1
Ubuntu 9.10:
okular 4:4.3.2-0ubuntu1.1
Ubuntu 10.04 LTS:
okular 4:4.4.2-0ubuntu1.1
After a standard system update you need to restart any running instances
of okular to make all the necessary changes.
Details follow:
Stefan Cornelius of Secunia Research discovered a boundary error during
RLE decompression in the “TranscribePalmImageToJPEG()” function in
generators/plucker/inplug/image.cpp of okular when processing images
embedded in PDB files, which can be exploited to cause a heap-based
buffer overflow. (CVE-2010-2575)