Solution
Please Install the Updated Packages.
Insight
Xpdf is an X Window System based viewer for Portable Document Format (PDF) files.
Petr Gajdos and Christian Kornacker of SUSE reported a buffer overflow flaw in Xpdf's Type 1 font parser. A specially-crafted PDF file with an embedded Type 1 font could cause Xpdf to crash or, possibly, execute arbitrary code when opened. (CVE-2009-4035)
Users are advised to upgrade to this updated package, which contains a backported patch to correct this issue.
Affected
xpdf on CentOS 4
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2009-4035 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities