Skip to content
OpenAdvisories
Unscored RHSA-2009:1500 4 CVEs

Red Hat Security Advisory: xpdf security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as xpdf 1:2.02-17.el3
Red Hat · RHEL 3 enterprise_linux:3::as xpdf-debuginfo 1:2.02-17.el3
Red Hat · RHEL 3 enterprise_linux:3::desktop xpdf 1:2.02-17.el3
Red Hat · RHEL 3 enterprise_linux:3::desktop xpdf-debuginfo 1:2.02-17.el3
Red Hat · RHEL 3 enterprise_linux:3::es xpdf 1:2.02-17.el3
Red Hat · RHEL 3 enterprise_linux:3::es xpdf-debuginfo 1:2.02-17.el3
Red Hat · RHEL 3 enterprise_linux:3::ws xpdf 1:2.02-17.el3
Red Hat · RHEL 3 enterprise_linux:3::ws xpdf-debuginfo 1:2.02-17.el3

Vulnerabilities 4

  • Unscored —
    CVE-2009-0791

    Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, a…

    cups Debian
  • Unscored —
    CVE-2009-3604

    The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kd…

    poppler ipe xpdf Debian Ubuntu
  • Unscored —
    CVE-2009-3606

    Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraph…

    poppler ipe xpdf Debian Ubuntu
  • Unscored —
    CVE-2009-3609

    Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1…

    poppler ipe xpdf Debian Ubuntu

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=491840
  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=526877
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=526893
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=526911
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1500.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-0791
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0791
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0791
  • report
    https://access.redhat.com/security/cve/CVE-2009-3604
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3604
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3604
  • report
    https://access.redhat.com/security/cve/CVE-2009-3606
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3606
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3606
  • report
    https://access.redhat.com/security/cve/CVE-2009-3609
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3609
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3609