Skip to content
OpenAdvisories
Unscored RHSA-2009:1501 6 CVEs

Red Hat Security Advisory: xpdf security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as xpdf 1:3.00-22.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::as xpdf-debuginfo 1:3.00-22.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::desktop xpdf 1:3.00-22.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::desktop xpdf-debuginfo 1:3.00-22.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::es xpdf 1:3.00-22.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::es xpdf-debuginfo 1:3.00-22.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::ws xpdf 1:3.00-22.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::ws xpdf-debuginfo 1:3.00-22.el4_8.1

Vulnerabilities 6

  • Unscored —
    CVE-2009-0791

    Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, a…

    cups Debian
  • Unscored —
    CVE-2009-1188

    Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-3604

    The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kd…

    poppler ipe xpdf Debian Ubuntu
  • Unscored —
    CVE-2009-3606

    Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraph…

    poppler ipe xpdf Debian Ubuntu
  • Unscored —
    CVE-2009-3608 EPSS 10%

    Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.…

    poppler ipe xpdf Debian Ubuntu
  • Unscored —
    CVE-2009-3609

    Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1…

    poppler ipe xpdf Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=491840
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495907
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=526637
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=526877
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=526893
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=526911
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1501.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-0791
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0791
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0791
  • report
    https://access.redhat.com/security/cve/CVE-2009-1188
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1188
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1188
  • report
    https://access.redhat.com/security/cve/CVE-2009-3604
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3604
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3604
  • report
    https://access.redhat.com/security/cve/CVE-2009-3606
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3606
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3606
  • report
    https://access.redhat.com/security/cve/CVE-2009-3608
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3608
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3608
  • report
    https://access.redhat.com/security/cve/CVE-2009-3609
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3609
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3609