Lucene search

K
centosCentOS ProjectCESA-2009:1503
HistoryOct 16, 2009 - 1:29 p.m.

gpdf security update

2009-10-1613:29:50
CentOS Project
lists.centos.org
38

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.44 Medium

EPSS

Percentile

97.3%

CentOS Errata and Security Advisory CESA-2009:1503

GPdf is a viewer for Portable Document Format (PDF) files.

Multiple integer overflow flaws were found in GPdf. An attacker could
create a malicious PDF file that would cause GPdf to crash or, potentially,
execute arbitrary code when opened. (CVE-2009-0791, CVE-2009-1188,
CVE-2009-3604, CVE-2009-3608, CVE-2009-3609)

Red Hat would like to thank Adam Zabrocki for reporting the CVE-2009-3604
issue, and Chris Rohlf for reporting the CVE-2009-3608 issue.

Users are advised to upgrade to this updated package, which contains a
backported patch to correct these issues.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2009-October/078353.html
https://lists.centos.org/pipermail/centos-announce/2009-October/078354.html

Affected packages:
gpdf

Upstream details at:
https://access.redhat.com/errata/RHSA-2009:1503

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.44 Medium

EPSS

Percentile

97.3%