Mandriva Linux Security Advisory 2009-068 – A crafted PDF file that triggers a parsing error allows remote attackers to cause definal of service. This bug is consequence of a wrong processing on FormWidgetChoice::loadDefaults method. A crafted PDF file that triggers a parsing error allows remote attackers to cause definal of service. This bug is consequence of an invalid memory dereference on JBIG2SymbolDict::~JBIG2SymbolDict destructor when JBIG2Stream::readSymbolDictSeg method is used. This update provides fixes for those vulnerabilities. This update does not apply for under Corporate Server 4.0 libpoppler0-0.4.1-3.7.20060mlcs4.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/75495/MDVSA-2009-068.txt
Source: https://packetstormsecurity.com/files/75495/Mandriva-Linux-Security-Advisory-2009-068.html