Read the docs
TI-2009-03445 Aliases CVE-2009-3608GHSA-6fmp-2mpq-35v4

Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before…

Priority MEDIUM 53CWE-189Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-189 and the CVSS impact.

Summary

Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.

Why it matters now

EPSS 0.10228 95th percentileScored 2026-11-07
Fix Fixed Red Hat: 7 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 62

CPEVersionsRoleVendor
cpe:2.3:a:foolabs:xpdf:3.02pl1:*:*:*:*:*:*:*3.02pl1VulnerableFoolabs
cpe:2.3:a:foolabs:xpdf:3.02pl2:*:*:*:*:*:*:*3.02pl2VulnerableFoolabs
cpe:2.3:a:foolabs:xpdf:3.02pl3:*:*:*:*:*:*:*3.02pl3VulnerableFoolabs
cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*3.00VulnerableGlyphandcog
cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*3.01VulnerableGlyphandcog
cpe:2.3:a:glyphandcog:xpdfreader:3.02:*:*:*:*:*:*:*3.02VulnerableGlyphandcog
cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*up to 0.12.0Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*0.1Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*0.1.1Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*0.1.2Vulnerablepoppler
  • cpe:2.3:a:foolabs:xpdf:3.02pl1:*:*:*:*:*:*:* Versions 3.02pl1 Vulnerable ·Foolabs
  • cpe:2.3:a:foolabs:xpdf:3.02pl2:*:*:*:*:*:*:* Versions 3.02pl2 Vulnerable ·Foolabs
  • cpe:2.3:a:foolabs:xpdf:3.02pl3:*:*:*:*:*:*:* Versions 3.02pl3 Vulnerable ·Foolabs
  • cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:* Versions 3.00 Vulnerable ·Glyphandcog
  • cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:* Versions 3.01 Vulnerable ·Glyphandcog
  • cpe:2.3:a:glyphandcog:xpdfreader:3.02:*:*:*:*:*:*:* Versions 3.02 Vulnerable ·Glyphandcog
  • cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:* Versions up to 0.12.0 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:* Versions 0.1 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:* Versions 0.1.1 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:* Versions 0.1.2 Vulnerable ·poppler
Show 52 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*0.2.0Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*0.3.0Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*0.3.1Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*0.3.2Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*0.3.3Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*0.4.0Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*0.4.1Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*0.4.2Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*0.4.3Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*0.4.4Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*0.5.0Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*0.5.1Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*0.5.2Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*0.5.3Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*0.5.4Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*0.5.9Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*0.6.0Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*0.6.1Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*0.6.2Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*0.6.3Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*0.6.4Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*0.7.0Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*0.7.1Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*0.7.2Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*0.7.3Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*0.8.0Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*0.8.1Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*0.8.2Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*0.8.3Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*0.8.4Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*0.8.6Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*0.8.7Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*0.9.0Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*0.9.1Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*0.9.2Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*0.9.3Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*0.10.0Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*0.10.1Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*0.10.2Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*0.10.3Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*0.10.4Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.10.5:*:*:*:*:*:*:*0.10.5Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.10.6:*:*:*:*:*:*:*0.10.6Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.10.7:*:*:*:*:*:*:*0.10.7Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.11.0:*:*:*:*:*:*:*0.11.0Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.11.1:*:*:*:*:*:*:*0.11.1Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.11.2:*:*:*:*:*:*:*0.11.2Vulnerablepoppler
cpe:2.3:a:poppler:poppler:0.11.3:*:*:*:*:*:*:*0.11.3Vulnerablepoppler
cpe:2.3:a:glyph_and_cog:pdftops:*:*:*:*:*:*:*:*all versionsRunning onGlyph And Cog
cpe:2.3:a:gnome:gpdf:*:*:*:*:*:*:*:*all versionsRunning onGNOME
cpe:2.3:a:kde:kpdf:*:*:*:*:*:*:*:*all versionsRunning onKDE
cpe:2.3:a:tetex:tetex:*:*:*:*:*:*:*:*all versionsRunning onTetex
  • cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:* Versions 0.2.0 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:* Versions 0.3.0 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:* Versions 0.3.1 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:* Versions 0.3.2 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:* Versions 0.3.3 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:* Versions 0.4.0 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:* Versions 0.4.1 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:* Versions 0.4.2 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:* Versions 0.4.3 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:* Versions 0.4.4 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:* Versions 0.5.0 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:* Versions 0.5.1 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:* Versions 0.5.2 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:* Versions 0.5.3 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:* Versions 0.5.4 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:* Versions 0.5.9 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:* Versions 0.6.0 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:* Versions 0.6.1 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:* Versions 0.6.2 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:* Versions 0.6.3 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:* Versions 0.6.4 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:* Versions 0.7.0 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:* Versions 0.7.1 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:* Versions 0.7.2 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:* Versions 0.7.3 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:* Versions 0.8.0 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:* Versions 0.8.1 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:* Versions 0.8.2 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:* Versions 0.8.3 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:* Versions 0.8.4 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:* Versions 0.8.6 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:* Versions 0.8.7 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:* Versions 0.9.0 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:* Versions 0.9.1 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:* Versions 0.9.2 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:* Versions 0.9.3 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:* Versions 0.10.0 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:* Versions 0.10.1 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:* Versions 0.10.2 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:* Versions 0.10.3 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:* Versions 0.10.4 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.10.5:*:*:*:*:*:*:* Versions 0.10.5 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.10.6:*:*:*:*:*:*:* Versions 0.10.6 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.10.7:*:*:*:*:*:*:* Versions 0.10.7 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.11.0:*:*:*:*:*:*:* Versions 0.11.0 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.11.1:*:*:*:*:*:*:* Versions 0.11.1 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.11.2:*:*:*:*:*:*:* Versions 0.11.2 Vulnerable ·poppler
  • cpe:2.3:a:poppler:poppler:0.11.3:*:*:*:*:*:*:* Versions 0.11.3 Vulnerable ·poppler
  • cpe:2.3:a:glyph_and_cog:pdftops:*:*:*:*:*:*:*:* Versions all versions Running on ·Glyph And Cog
  • cpe:2.3:a:gnome:gpdf:*:*:*:*:*:*:*:* Versions all versions Running on ·GNOME
  • cpe:2.3:a:kde:kpdf:*:*:*:*:*:*:*:* Versions all versions Running on ·KDE
  • cpe:2.3:a:tetex:tetex:*:*:*:*:*:*:*:* Versions all versions Running on ·Tetex

Remediation

Red Hat 7 advisories

  • RHSA-2010:0400 Released 2010-05-06 · Red Hat rating Moderate
    tetex security update
    • Red Hat Enterprise Linux (v. 5 server) tetex-3.0-33.8.el5_5.5, tetex-3.0-33.8.el5_5.5.i386, tetex-3.0-33.8.el5_5.5.ia64 +25
    • Red Hat Enterprise Linux Desktop (v. 5 client) tetex-3.0-33.8.el5_5.5, tetex-3.0-33.8.el5_5.5.i386, tetex-afm-3.0-33.8.el5_5.5 +11
  • RHSA-2009:1512 Released 2009-10-15 · Red Hat rating Important
    kdegraphics security update
    • Red Hat Enterprise Linux AS version 4 kdegraphics-7:3.3.1-15.el4_8.2, kdegraphics-7:3.3.1-15.el4_8.2.i386, kdegraphics-7:3.3.1-15.el4_8.2.ia64 +5
    • Red Hat Enterprise Linux Desktop version 4 kdegraphics-7:3.3.1-15.el4_8.2, kdegraphics-7:3.3.1-15.el4_8.2.i386, kdegraphics-devel-7:3.3.1-15.el4_8.2 +1
    • Red Hat Enterprise Linux ES version 4 kdegraphics-7:3.3.1-15.el4_8.2, kdegraphics-7:3.3.1-15.el4_8.2.i386, kdegraphics-7:3.3.1-15.el4_8.2.ia64 +3
    • Red Hat Enterprise Linux WS version 4 kdegraphics-7:3.3.1-15.el4_8.2, kdegraphics-7:3.3.1-15.el4_8.2.i386, kdegraphics-7:3.3.1-15.el4_8.2.ia64 +3
  • RHSA-2009:1513 Released 2009-10-15 · Red Hat rating Moderate
    cups security update
    • Red Hat Enterprise Linux (v. 5 server) cups-1:1.3.7-11.el5_4.3, cups-1:1.3.7-11.el5_4.3.i386, cups-1:1.3.7-11.el5_4.3.ia64 +13
    • Red Hat Enterprise Linux Desktop (v. 5 client) cups-1:1.3.7-11.el5_4.3, cups-1:1.3.7-11.el5_4.3.i386, cups-libs-1:1.3.7-11.el5_4.3 +3
    • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) cups-1:1.3.7-11.el5_4.3, cups-devel-1:1.3.7-11.el5_4.3, cups-devel-1:1.3.7-11.el5_4.3.i386
Show 4 more Red Hat advisories
  • RHSA-2009:1504 Released 2009-10-15 · Red Hat rating Important
    poppler security and bug fix update
    • Red Hat Enterprise Linux (v. 5 server) poppler-0.5.4-4.4.el5_4.11, poppler-0.5.4-4.4.el5_4.11.i386, poppler-0.5.4-4.4.el5_4.11.ia64 +9
    • Red Hat Enterprise Linux Desktop (v. 5 client) poppler-0.5.4-4.4.el5_4.11, poppler-0.5.4-4.4.el5_4.11.i386, poppler-utils-0.5.4-4.4.el5_4.11 +1
    • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) poppler-0.5.4-4.4.el5_4.11, poppler-devel-0.5.4-4.4.el5_4.11, poppler-devel-0.5.4-4.4.el5_4.11.i386
  • RHSA-2009:1503 Released 2009-10-15 · Red Hat rating Important
    gpdf security update
    • Red Hat Enterprise Linux AS version 4 gpdf-2.8.2-7.7.2.el4_8.5, gpdf-2.8.2-7.7.2.el4_8.5.i386, gpdf-2.8.2-7.7.2.el4_8.5.ia64 +1
    • Red Hat Enterprise Linux Desktop version 4 gpdf-2.8.2-7.7.2.el4_8.5, gpdf-2.8.2-7.7.2.el4_8.5.i386
    • Red Hat Enterprise Linux ES version 4 gpdf-2.8.2-7.7.2.el4_8.5, gpdf-2.8.2-7.7.2.el4_8.5.i386, gpdf-2.8.2-7.7.2.el4_8.5.ia64
    • Red Hat Enterprise Linux WS version 4 gpdf-2.8.2-7.7.2.el4_8.5, gpdf-2.8.2-7.7.2.el4_8.5.i386, gpdf-2.8.2-7.7.2.el4_8.5.ia64
  • RHSA-2009:1501 Released 2009-10-15 · Red Hat rating Important
    xpdf security update
    • Red Hat Enterprise Linux AS version 4 xpdf-1:3.00-22.el4_8.1, xpdf-1:3.00-22.el4_8.1.i386, xpdf-1:3.00-22.el4_8.1.ia64 +1
    • Red Hat Enterprise Linux Desktop version 4 xpdf-1:3.00-22.el4_8.1, xpdf-1:3.00-22.el4_8.1.i386
    • Red Hat Enterprise Linux ES version 4 xpdf-1:3.00-22.el4_8.1, xpdf-1:3.00-22.el4_8.1.i386, xpdf-1:3.00-22.el4_8.1.ia64
    • Red Hat Enterprise Linux WS version 4 xpdf-1:3.00-22.el4_8.1, xpdf-1:3.00-22.el4_8.1.i386, xpdf-1:3.00-22.el4_8.1.ia64
  • RHSA-2009:1502 Released 2009-10-15 · Red Hat rating Important
    kdegraphics security update
    • Red Hat Enterprise Linux Desktop (v. 5 client) kdegraphics-7:3.5.4-15.el5_4.2, kdegraphics-7:3.5.4-15.el5_4.2.i386
    • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) kdegraphics-7:3.5.4-15.el5_4.2, kdegraphics-devel-7:3.5.4-15.el5_4.2, kdegraphics-devel-7:3.5.4-15.el5_4.2.i386
    • Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) kdegraphics-7:3.5.4-15.el5_4.2, kdegraphics-7:3.5.4-15.el5_4.2.i386, kdegraphics-devel-7:3.5.4-15.el5_4.2 +1

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2009:1504, RHSA-2009:1513, RHSA-2010:0400
Red Hat Enterprise Linux AS version 4Fixed RHSA-2009:1501, RHSA-2009:1503, RHSA-2009:1512
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2009:1502, RHSA-2009:1504, RHSA-2009:1513, RHSA-2010:0400
Red Hat Enterprise Linux Desktop Workstation (v. 5 client)Fixed RHSA-2009:1502, RHSA-2009:1504, RHSA-2009:1513
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2009:1501, RHSA-2009:1503, RHSA-2009:1512
Red Hat Enterprise Linux ES version 4Fixed RHSA-2009:1501, RHSA-2009:1503, RHSA-2009:1512
Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)Fixed RHSA-2009:1502
Red Hat Enterprise Linux WS version 4Fixed RHSA-2009:1501, RHSA-2009:1503, RHSA-2009:1512

Timeline

  1. 2026-10-02 Threatist record created from CVE-2009-3608
  2. 2026-10-03 Alias added: GHSA-6fmp-2mpq-35v4

References

Patch 3

Advisory 25

Other 7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences