CESA-2009:1501 -- centos 4 i386 xpdf
|ID: oval:org.secpod.oval:def:202713||Date: (C)2013-05-08 (M)2017-12-06|
|Class: PATCH||Family: unix|
Xpdf is an X Window System based viewer for Portable Document Format files. Multiple integer overflow flaws were found in Xpdf. An attacker could create a malicious PDF file that would cause Xpdf to crash or, potentially, execute arbitrary code when opened. Red Hat would like to thank Adam Zabrocki for reporting the CVE-2009-3604 issue, and Chris Rohlf for reporting the CVE-2009-3608 issue. Users are advised to upgrade to this updated package, which contains a backported patch to correct these issues.