Lucene search
RedHatRHSA-2009:1680HistoryDec 16, 2009 - 12:00 a.m.
(RHSA-2009:1680) Important: xpdf security update
2009-12-1600:00:00
access.redhat.com
16
EPSS
0.006
Percentile
79.1%
Xpdf is an X Window System based viewer for Portable Document Format (PDF)
files.
Petr Gajdos and Christian Kornacker of SUSE reported a buffer overflow flaw
in Xpdf’s Type 1 font parser. A specially-crafted PDF file with an embedded
Type 1 font could cause Xpdf to crash or, possibly, execute arbitrary code
when opened. (CVE-2009-4035)
Users are advised to upgrade to this updated package, which contains a
backported patch to correct this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 4 | x86_64 | xpdf | < 3.00-23.el4_8.1 | xpdf-3.00-23.el4_8.1.x86_64.rpm |
| RedHat | 4 | src | xpdf | < 3.00-23.el4_8.1 | xpdf-3.00-23.el4_8.1.src.rpm |
| RedHat | 4 | s390 | xpdf | < 3.00-23.el4_8.1 | xpdf-3.00-23.el4_8.1.s390.rpm |
| RedHat | 4 | ia64 | xpdf | < 3.00-23.el4_8.1 | xpdf-3.00-23.el4_8.1.ia64.rpm |
| RedHat | 4 | i386 | xpdf | < 3.00-23.el4_8.1 | xpdf-3.00-23.el4_8.1.i386.rpm |
| RedHat | 4 | s390x | xpdf | < 3.00-23.el4_8.1 | xpdf-3.00-23.el4_8.1.s390x.rpm |
| RedHat | 4 | ppc | xpdf | < 3.00-23.el4_8.1 | xpdf-3.00-23.el4_8.1.ppc.rpm |
Related
debiancve
debiancve
CVE-2009-4035
2009-12-21 21:30:00
openvas
openvas
CentOS Update for kdegraphics CESA-2009:1682 centos4 i386
2011-08-09 00:00:00
RedHat Security Advisory RHSA-2009:1680
2009-12-30 00:00:00
CentOS Security Advisory CESA-2009:1680 (xpdf)
2009-12-30 00:00:00
centos
centos
gpdf security update
2009-12-18 19:10:20
kdegraphics security update
2009-12-18 19:17:55
xpdf security update
2009-12-18 19:08:10
redhat
redhat
(RHSA-2009:1682) Important: kdegraphics security update
2009-12-16 00:00:00
(RHSA-2009:1681) Important: gpdf security update
2009-12-16 00:00:00
nessus
nessus
Oracle Linux 4 : kdegraphics (ELSA-2009-1682)
2013-07-12 00:00:00
Oracle Linux 4 : gpdf (ELSA-2009-1681)
2013-07-12 00:00:00
RHEL 4 : xpdf (RHSA-2009:1680)
2009-12-17 00:00:00
oraclelinux
oraclelinux
kdegraphics security update
2009-12-16 00:00:00
gpdf security update
2009-12-16 00:00:00
xpdf security update
2009-12-16 00:00:00
ubuntucve
ubuntucve
CVE-2009-4035
2009-12-21 00:00:00
nvd
nvd
CVE-2009-4035
2009-12-21 21:30:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:41:12
prion
prion
Design/Logic Flaw
2009-12-21 21:30:00
cvelist
cvelist
CVE-2009-4035
2009-12-21 21:00:00
cve
cve
CVE-2009-4035
2009-12-21 21:30:00
gentoo
gentoo
Xpdf: User-assisted execution of arbitrary code
2014-02-17 00:00:00