Oval Definition:oval:com.redhat.rhsa:def:20091682
Revision Date:2009-12-16Version:637
Title:RHSA-2009:1682: kdegraphics security update (Important)
Description:The kdegraphics packages contain applications for the K Desktop Environment, including KPDF, a viewer for Portable Document Format (PDF) files.

  • Petr Gajdos and Christian Kornacker of SUSE reported a buffer overflow flaw in KPDF's Type 1 font parser. A specially-crafted PDF file with an embedded Type 1 font could cause KPDF to crash or, possibly, execute arbitrary code when opened. (CVE-2009-4035)

    Users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2009-4035
    RHSA-2009:1682
    RHSA-2009:1682-01
    RHSA-2009:1682-01
    Platform(s):Red Hat Enterprise Linux 4
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 4 is installed
  • AND
  • kdegraphics is earlier than 7:3.3.1-17.el4_8.1
  • AND kdegraphics is signed with Red Hat redhatrelease2 key
  • kdegraphics-devel is earlier than 7:3.3.1-17.el4_8.1
  • AND kdegraphics-devel is signed with Red Hat redhatrelease2 key
  • BACK