PT-2009-1050 · Kde+2 · Kdegraphics+3

Publicado

2009-04-16

·

Atualizado

2019-03-06

·

CVE-2009-0195

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Xpdf versions 3.02pl2 and earlier kdegraphics-devel versions 3.5.4 and earlier kdegraphics versions 3.5.4 and earlier
Description The issue allows remote attackers to execute arbitrary code via a crafted PDF file. Multiple vulnerabilities in the kdegraphics package can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.
Recommendations For Xpdf versions 3.02pl2 and earlier, update to a version later than 3.02pl2 to resolve the issue. For kdegraphics-devel versions 3.5.4 and earlier, consider disabling the package until a patch is available. For kdegraphics versions 3.5.4 and earlier, restrict access to the package to minimize the risk of exploitation.

Correção

RCE

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399CWE-119

Identificadores relacionados

BDU:2015-06216
BDU:2015-06220
BDU:2015-08480
BDU:2015-08481
CVE-2009-0195
DSA-1790-1
RHSA-2009:0429
RHSA-2009:0430
RHSA-2009:0431
RHSA-2009:0458
RHSA-2009:0480
RHSA-2009_0429
RHSA-2009_0430
RHSA-2009_0431
RHSA-2009_0458
RHSA-2009_0480
RHSA-2010:0399
RHSA-2010:0400
RHSA-2010_0399
RHSA-2010_0400

Produtos afetados

Red Hat
Xpdf
Kdegraphics
Kdegraphics-Devel