CVE:CVE-2009-3603
CNNVD:CNNVD-200910-366
XPDF是FOO实验室的一款开源的PDF阅读器。该产品支持解码LZW压缩格式的文件以及阅读加密的PDF文件。
XPDF 3.02pl4之前的3.x版本存在数字错误漏洞，该漏洞源于存在整数溢出，允许远程攻击者通过触发基于堆的缓冲区溢出的精心制作的PDF文档执行任意代码。
solution:Upgrade foolabs xpdf to a higher version than 3.02pl1,3.02pl2,3.02pl3,and avoid the version 3.02pl1,3.02pl2,3.02pl3; Upgrade glyphandcog xpdfreader to a higher version than 3.00,3.01,3.02,and avoid the version 3.00,3.01,3.02; Upgrade poppler poppler to a higher version than 0.12.0,0.1,0.1.1,0.1.2,0.2.0,0.3.0,0.3.1,0.3.2,0.3.3,0.4.0,0.4.1,0.4.2,0.4.3,0.4.4,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.9,0.6.0,0.6.1,0.6.2,0.6.3,0.6.4,0.7.0,0.7.1,0.7.2,0.7.3,0.8.0,0.8.1,0.8.2,0.8.3,0.8.4,0.8.6,0.8.7,0.9.0,0.9.1,0.9.2,0.9.3,0.10.0,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.10.7,0.11.0,0.11.1,0.11.2,0.11.3,and avoid the version (,0.12.0],0.1,0.1.1,0.1.2,0.2.0,0.3.0,0.3.1,0.3.2,0.3.3,0.4.0,0.4.1,0.4.2,0.4.3,0.4.4,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.9,0.6.0,0.6.1,0.6.2,0.6.3,0.6.4,0.7.0,0.7.1,0.7.2,0.7.3,0.8.0,0.8.1,0.8.2,0.8.3,0.8.4,0.8.6,0.8.7,0.9.0,0.9.1,0.9.2,0.9.3,0.10.0,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.10.7,0.11.0,0.11.1,0.11.2,0.11.3