Red Hat Security AdvisoryRHSA-2009:1500
xpdf security update
Released 2009-10-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 xpdf-1:2.02-17.el3, xpdf-1:2.02-17.el3.i386
- Red Hat Enterprise Linux AS version 3 xpdf-1:2.02-17.el3, xpdf-1:2.02-17.el3.i386, xpdf-1:2.02-17.el3.ia64 +1
- Red Hat Enterprise Linux ES version 3 xpdf-1:2.02-17.el3, xpdf-1:2.02-17.el3.i386, xpdf-1:2.02-17.el3.ia64
- Red Hat Enterprise Linux WS version 3 xpdf-1:2.02-17.el3, xpdf-1:2.02-17.el3.i386, xpdf-1:2.02-17.el3.ia64
Fixes 4 records
Priority MEDIUM 51
Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that trig…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08629 · Published 2009-10-21 · Fixed CWE-189
Priority MEDIUM 51
The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08703 · Published 2009-10-21 · Fixed CWE-399
Priority LOW 39
Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (applicatio…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05544 · Published 2009-06-09 · Fixed CWE-189
Priority LOW 28
Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of s…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04665 · Published 2009-10-21 · Fixed CWE-189