CESA-2009:1502 -- centos 5 i386 kdegraphics
|ID: oval:org.secpod.oval:def:202027||Date: (C)2012-01-31 (M)2017-10-04|
|Class: PATCH||Family: unix|
The kdegraphics packages contain applications for the K Desktop Environment, including KPDF, a viewer for Portable Document Format files. Multiple integer overflow flaws were found in KPDF. An attacker could create a malicious PDF file that would cause KPDF to crash or, potentially, execute arbitrary code when opened. Red Hat would like to thank Adam Zabrocki for reporting the CVE-2009-3604 issue, and Chris Rohlf for reporting the CVE-2009-3608 issue. Users are advised to upgrade to these updated packages, which contain a backported patch to resolve these issues.