CVE-2009-1144 | BDVDB-2026-36038 Detail

Description#

Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the current working directory, related to an unset SYSTEM_XPDFRC macro in a Gentoo build process that uses the poppler library.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/34610
http://security.gentoo.org/glsa/glsa-200904-07.xml
http://bugs.gentoo.org/show_bug.cgi?id=200023
http://bugs.gentoo.org/show_bug.cgi?id=242930
http://www.securityfocus.com/bid/34401
http://osvdb.org/53529

Exploit#

No public exploit known

History#

Version 12009-04-09Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.