| Resumen: | The remote host is missing updates announced in;advisory RHSA-2009:1504.;;Poppler is a Portable Document Format (PDF) rendering library, used by;applications such as Evince.;;Multiple integer overflow flaws were found in poppler. An attacker could;create a malicious PDF file that would cause applications that use poppler;(such as Evince) to crash or, potentially, execute arbitrary code when;opened. (CVE-2009-3603, CVE-2009-3608, CVE-2009-3609);;Red Hat would like to thank Chris Rohlf for reporting the CVE-2009-3608;issue.;;This update also corrects a regression introduced in the previous poppler;security update, RHSA-2009:0480, that prevented poppler from rendering;certain PDF documents correctly. (BZ#528147);;Users are advised to upgrade to these updated packages, which contain;backported patches to resolve these issues. |
| Descripción: | Summary:
The remote host is missing updates announced in
advisory RHSA-2009:1504.
Poppler is a Portable Document Format (PDF) rendering library, used by
applications such as Evince.
Multiple integer overflow flaws were found in poppler. An attacker could
create a malicious PDF file that would cause applications that use poppler
(such as Evince) to crash or, potentially, execute arbitrary code when
opened. (CVE-2009-3603, CVE-2009-3608, CVE-2009-3609)
Red Hat would like to thank Chris Rohlf for reporting the CVE-2009-3608
issue.
This update also corrects a regression introduced in the previous poppler
security update, RHSA-2009:0480, that prevented poppler from rendering
certain PDF documents correctly. (BZ#528147)
Users are advised to upgrade to these updated packages, which contain
backported patches to resolve these issues.
Solution:
Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date
CVSS Score:
9.3
CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
