NetSight
IP …
medium6.9

CVE-2009-1144

Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the cu…

Impact

Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the current working directory, related to an unset SYSTEM_XPDFRC macro in a Gentoo build process that uses the poppler library.

Affected products

VendorProductAffected versions
FoolabsXpdf
Versions 0.5a, 0.7a, 0.91a, 0.91b, 0.91c, 0.92a
GlyphandcogXpdfreader
through 3.02
Versions 0.2, 0.3, 0.4, 0.5, 0.6

Weakness classification

CWE-94

References