Skip to content
OpenAdvisories
Unscored RHSA-2009:1504 3 CVEs

Red Hat Security Advisory: poppler security and bug fix update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client poppler 0:0.5.4-4.4.el5_4.11
Red Hat · RHEL 5 enterprise_linux:5::client poppler-debuginfo 0:0.5.4-4.4.el5_4.11
Red Hat · RHEL 5 enterprise_linux:5::client poppler-utils 0:0.5.4-4.4.el5_4.11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation poppler 0:0.5.4-4.4.el5_4.11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation poppler-debuginfo 0:0.5.4-4.4.el5_4.11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation poppler-devel 0:0.5.4-4.4.el5_4.11
Red Hat · RHEL 5 enterprise_linux:5::server poppler 0:0.5.4-4.4.el5_4.11
Red Hat · RHEL 5 enterprise_linux:5::server poppler-debuginfo 0:0.5.4-4.4.el5_4.11
Red Hat · RHEL 5 enterprise_linux:5::server poppler-devel 0:0.5.4-4.4.el5_4.11
Red Hat · RHEL 5 enterprise_linux:5::server poppler-utils 0:0.5.4-4.4.el5_4.11

Vulnerabilities 3

  • Unscored —
    CVE-2009-3603

    Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might …

    poppler ipe xpdf Debian Ubuntu
  • Unscored —
    CVE-2009-3608 EPSS 10%

    Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.…

    poppler ipe xpdf Debian Ubuntu
  • Unscored —
    CVE-2009-3609

    Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1…

    poppler ipe xpdf Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=526637
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=526893
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=526915
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=528147
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1504.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-3603
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3603
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3603
  • report
    https://access.redhat.com/security/cve/CVE-2009-3608
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3608
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3608
  • report
    https://access.redhat.com/security/cve/CVE-2009-3609
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3609
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3609