Solution
Please Install the Updated Packages.
Insight
The kdegraphics packages contain applications for the K Desktop Environment, including KPDF, a viewer for Portable Document Format (PDF) files.
Petr Gajdos and Christian Kornacker of SUSE reported a buffer overflow flaw in KPDF's Type 1 font parser. A specially-crafted PDF file with an embedded Type 1 font could cause KPDF to crash or, possibly, execute arbitrary code when opened. (CVE-2009-4035)
Users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.
Affected
kdegraphics on CentOS 4
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2009-4035 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities