openSUSE Security Update : xpdf (xpdf-1397)
high Nessus Plugin ID 42417
Synopsis
The remote openSUSE host is missing a security update.Description
Specially crafted PDF files could cause buffer overflows in xpdf when viewing such a document (CVE-2009-3603, CVE-2009-3604, CVE-2009-3605, CVE-2009-3606, CVE-2009-3608, CVE-2009-3609).Solution
Update the affected xpdf packages.See Also
https://bugzilla.novell.com/show_bug.cgi?id=534764
Plugin Details
Severity: High
ID: 42417
File Name: suse_11_0_xpdf-091023.nasl
Version: 1.12
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 11/9/2009
Updated: 1/14/2021
Supported Sensors: Nessus Agent
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:novell:opensuse:xpdf, p-cpe:/a:novell:opensuse:xpdf-tools, cpe:/o:novell:opensuse:11.0
Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu
Patch Publication Date: 10/23/2009
Reference Information
CVE: CVE-2009-3603, CVE-2009-3604, CVE-2009-3605, CVE-2009-3606, CVE-2009-3608, CVE-2009-3609