Red Hat Security AdvisoryRHSA-2009:1504
poppler security and bug fix update
Released 2009-10-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) poppler-0.5.4-4.4.el5_4.11, poppler-0.5.4-4.4.el5_4.11.i386, poppler-0.5.4-4.4.el5_4.11.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) poppler-0.5.4-4.4.el5_4.11, poppler-0.5.4-4.4.el5_4.11.i386, poppler-utils-0.5.4-4.4.el5_4.11 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) poppler-0.5.4-4.4.el5_4.11, poppler-devel-0.5.4-4.4.el5_4.11, poppler-devel-0.5.4-4.4.el5_4.11.i386
Fixes 3 records
Priority MEDIUM 53
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to exe…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.10228 · Published 2009-10-21 · Fixed CWE-189
Priority MEDIUM 51
Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-base…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08582 · Published 2009-10-21 · Fixed CWE-189
Priority LOW 28
Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of s…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04665 · Published 2009-10-21 · Fixed CWE-189
THREATIST.IORead the docs