Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:
Category:Fedora Local Security Checks
Title:Fedora Core 10 FEDORA-2009-10694 (xpdf)
The remote host is missing an update to xpdf
announced via advisory FEDORA-2009-10694.

Update Information:

- apply xpdf-3.02pl4 security patch to fix: CVE-2009-1188/CVE-2009-3603,
CVE-2009-3604, CVE-2009-3606, CVE-2009-3608, CVE-2009-3609


* Fri Oct 16 2009 Tom spot Callaway - 1:3.02-15
- apply xpdf-3.02pl4 security patch to fix:
CVE-2009-3603, CVE-2009-3604, CVE-2009-3605, CVE-2009-3606
CVE-2009-3608, CVE-2009-3609


[ 1 ] Bug #495907 - CVE-2009-1188 xpdf/poppler: SplashBitmap integer overflow
[ 2 ] Bug #526911 - CVE-2009-3604 xpdf/poppler: Splash::drawImage integer overflow and missing allocation return value check
[ 3 ] Bug #526877 - CVE-2009-3606 xpdf/poppler: PSOutputDev::doImageL1Sep integer overflow
[ 4 ] Bug #526637 - CVE-2009-3608 xpdf/poppler: integer overflow in ObjectStream::ObjectStream (oCERT-2009-016)
[ 5 ] Bug #526893 - CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow

Solution: Apply the appropriate updates.

This update can be installed with the yum update program. Use
su -c 'yum update xpdf' at the command line.
For more information, refer to Managing Software with yum,
available at

CVSS Score:

CVSS Vector:

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2009-1188
BugTraq ID: 34568
Bugtraq: 20090417 rPSA-2009-0059-1 poppler (Google Search)
CERT/CC vulnerability note: VU#196617
Debian Security Information: DSA-2028 (Google Search)
Debian Security Information: DSA-2050 (Google Search)
RedHat Security Advisories: RHSA-2009:1501
RedHat Security Advisories: RHSA-2009:1502
RedHat Security Advisories: RHSA-2009:1503
RedHat Security Advisories: RHSA-2009:1512
XForce ISS Database: poppler-jbig2-splashbitmap-code-execution(50185)
Common Vulnerability Exposure (CVE) ID: CVE-2009-3603
BugTraq ID: 36703
RedHat Security Advisories: RHSA-2009:1504
SuSE Security Announcement: SUSE-SR:2009:018 (Google Search)
XForce ISS Database: xpdf-splashbitmap-bo(53793)
Common Vulnerability Exposure (CVE) ID: CVE-2009-3604
RedHat Security Advisories: RHSA-2009:1500
XForce ISS Database: xpdf-splashdrawimage-bo(53795)
Common Vulnerability Exposure (CVE) ID: CVE-2009-3606
Debian Security Information: DSA-1941 (Google Search)
XForce ISS Database: xpdf-psoutputdev-bo(53798)
Common Vulnerability Exposure (CVE) ID: CVE-2009-3608
RedHat Security Advisories: RHSA-2009:1513
XForce ISS Database: xpdf-objectstream-bo(53794)
Common Vulnerability Exposure (CVE) ID: CVE-2009-3609
XForce ISS Database: xpdf-imagestream-dos(53800)
Common Vulnerability Exposure (CVE) ID: CVE-2009-3605
Common Vulnerability Exposure (CVE) ID: CVE-2009-0799
Debian Security Information: DSA-1790 (Google Search)
Debian Security Information: DSA-1793 (Google Search)
RedHat Security Advisories: RHSA-2009:0458
SuSE Security Announcement: SUSE-SA:2009:024 (Google Search)
SuSE Security Announcement: SUSE-SR:2009:010 (Google Search)
SuSE Security Announcement: SUSE-SR:2009:012 (Google Search)
Common Vulnerability Exposure (CVE) ID: CVE-2009-0800
Common Vulnerability Exposure (CVE) ID: CVE-2009-1179
Common Vulnerability Exposure (CVE) ID: CVE-2009-1180
Common Vulnerability Exposure (CVE) ID: CVE-2009-1181
Common Vulnerability Exposure (CVE) ID: CVE-2009-1182
Common Vulnerability Exposure (CVE) ID: CVE-2009-1183
CopyrightCopyright (c) 2009 E-Soft Inc.

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.

© 1998-2023 E-Soft Inc. All rights reserved.