| Summary: | The remote host is missing updates announced in;advisory RHSA-2009:1501.;;Xpdf is an X Window System based viewer for Portable Document Format (PDF);files.;;Multiple integer overflow flaws were found in Xpdf. An attacker could;create a malicious PDF file that would cause Xpdf to crash or, potentially,;execute arbitrary code when opened. (CVE-2009-0791, CVE-2009-1188,;CVE-2009-3604, CVE-2009-3606, CVE-2009-3608, CVE-2009-3609);;Red Hat would like to thank Adam Zabrocki for reporting the CVE-2009-3604;issue, and Chris Rohlf for reporting the CVE-2009-3608 issue.;;Users are advised to upgrade to this updated package, which contains a;backported patch to correct these issues. |
| Description: | Summary:
The remote host is missing updates announced in
advisory RHSA-2009:1501.
Xpdf is an X Window System based viewer for Portable Document Format (PDF)
files.
Multiple integer overflow flaws were found in Xpdf. An attacker could
create a malicious PDF file that would cause Xpdf to crash or, potentially,
execute arbitrary code when opened. (CVE-2009-0791, CVE-2009-1188,
CVE-2009-3604, CVE-2009-3606, CVE-2009-3608, CVE-2009-3609)
Red Hat would like to thank Adam Zabrocki for reporting the CVE-2009-3604
issue, and Chris Rohlf for reporting the CVE-2009-3608 issue.
Users are advised to upgrade to this updated package, which contains a
backported patch to correct these issues.
Solution:
Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date
CVSS Score:
9.3
CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
