Debian Security Advisory DSA 936-1 – infamous41md and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format (PDF) suite, which is also present in libextractor, a library to extract arbitrary meta-data from files, and which can lead to a denial of service by crashing the application or possibly to the execution of arbitrary code.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/43007/dsa-936-1.txt
Source: https://packetstormsecurity.com/files/43007/Debian-Linux-Security-Advisory-936-1.html