CVE-2009-1144

Published: Apr 9, 2009Modified: Apr 23, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the current working directory, related to an unset SYSTEM_XPDFRC macro in a Gentoo build process that uses the poppler library.

Affected (32)

Products: Foolabs: Xpdf · Glyphandcog: Xpdfreader

1 product

1 product

Configuration A

32 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Foolabs Xpdf	Version 0.5a
Foolabs Xpdf	Version 0.7a
Foolabs Xpdf	Version 0.91a
Foolabs Xpdf	Version 0.91b
Foolabs Xpdf	Version 0.91c
Foolabs Xpdf	Version 0.92a
Foolabs Xpdf	Version 0.92b
Foolabs Xpdf	Version 0.92c
Foolabs Xpdf	Version 0.92d
Foolabs Xpdf	Version 0.92e
Foolabs Xpdf	Version 0.93a
Foolabs Xpdf	Version 0.93b
Foolabs Xpdf	Version 0.93c
Foolabs Xpdf	Version 1.00a
Glyphandcog Xpdfreader	Up to 3.02
Glyphandcog Xpdfreader	Version 0.2
Glyphandcog Xpdfreader	Version 0.3
Glyphandcog Xpdfreader	Version 0.4
Glyphandcog Xpdfreader	Version 0.5
Glyphandcog Xpdfreader	Version 0.6
Glyphandcog Xpdfreader	Version 0.7
Glyphandcog Xpdfreader	Version 0.80
Glyphandcog Xpdfreader	Version 0.90
Glyphandcog Xpdfreader	Version 0.91
Glyphandcog Xpdfreader	Version 0.93
Glyphandcog Xpdfreader	Version 1.00
Glyphandcog Xpdfreader	Version 1.01
Glyphandcog Xpdfreader	Version 2.00
Glyphandcog Xpdfreader	Version 2.01
Glyphandcog Xpdfreader	Version 2.02
Glyphandcog Xpdfreader	Version 2.03
Glyphandcog Xpdfreader	Version 3.00