Oval Definition:oval:com.redhat.rhsa:def:20091501
Revision Date:2009-10-15Version:638
Title:RHSA-2009:1501: xpdf security update (Important)
Description:Xpdf is an X Window System based viewer for Portable Document Format (PDF) files.

  • Multiple integer overflow flaws were found in Xpdf. An attacker could create a malicious PDF file that would cause Xpdf to crash or, potentially, execute arbitrary code when opened. (CVE-2009-0791, CVE-2009-1188, CVE-2009-3604, CVE-2009-3606, CVE-2009-3608, CVE-2009-3609)

    Red Hat would like to thank Adam Zabrocki for reporting the CVE-2009-3604 issue, and Chris Rohlf for reporting the CVE-2009-3608 issue.

    Users are advised to upgrade to this updated package, which contains a backported patch to correct these issues.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2009-0791
    CVE-2009-1188
    CVE-2009-3604
    CVE-2009-3606
    CVE-2009-3608
    CVE-2009-3609
    RHSA-2009:1501
    RHSA-2009:1501-01
    RHSA-2009:1501-01
    Platform(s):Red Hat Enterprise Linux 4
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 4 is installed
  • AND xpdf is earlier than 1:3.00-22.el4_8.1
  • AND xpdf is signed with Red Hat redhatrelease2 key
  • BACK