EUVD-2009-1145

Malware in sbrugna...

CVE-2009-1144: Improper Control of Generation of Code

Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the current working directory, related to an unset SYSTEMXPDFRC macro in a Gentoo build process that uses the poppler library...

xpdf code execution

xpdfrc file from current location may be processed...

GLSA-200904-07 : Xpdf: Untrusted search path

The remote host is affected by the vulnerability described in GLSA-200904-07 Xpdf: Untrusted search path Erik Wallin reported that Gentoo's Xpdf attempts to read the 'xpdfrc' file from the current working directory if it cannot find a '.xpdfrc' file in the user's home directory. This is caused by...