Gentoo Security Advisory GLSA 200904-07 (xpdf)

The remote host is missing updates announced in advisory GLSA 200904-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2009-1144

Summary (CVE-2009-1144) : Untrusted search path in Gentoo's Xpdf package prior to 3.02-r2 allows local privilege escalation via a Trojan horse xpdfrc in the current working directory. The issue stems from a missing SYSTEM_XPDFRC macro during Gentoo builds that use the poppler library. The vulnera...