CVE:CVE-2009-1144
CNNVD:CNNVD-200904-195
Xpdf 3.02-r2之前版本的Gentoo信息包存在不可信的搜索路径漏洞。本地用户可以借助目前正在工作的目录中的一个特洛伊木马xpdfrc文件，获得特权。
solution:Upgrade foolabs xpdf to a higher version than 0.5a,0.7a,0.91a,0.91b,0.91c,0.92a,0.92b,0.92c,0.92d,0.92e,0.93a,0.93b,0.93c,1.00a,and avoid the version 0.5a,0.7a,0.91a,0.91b,0.91c,0.92a,0.92b,0.92c,0.92d,0.92e,0.93a,0.93b,0.93c,1.00a; Upgrade glyphandcog xpdfreader to a higher version than 3.02,0.2,0.3,0.4,0.5,0.6,0.7,0.80,0.90,0.91,0.93,1.00,1.01,2.00,2.01,2.02,2.03,3.00,and avoid the version (,3.02],0.2,0.3,0.4,0.5,0.6,0.7,0.80,0.90,0.91,0.93,1.00,1.01,2.00,2.01,2.02,2.03,3.00