| Package | Affected versions | Patched versions |
|---|---|---|
| xpdf | = 0.5a= 0.7a= 0.91a= 0.91b= 0.91c= 0.92a= 0.92b= 0.92c= 0.92d= 0.92e= 0.93a= 0.93b= 0.93c= 1.00a | |
| xpdfreader | = 0.2= 0.3= 0.4= 0.5= 0.6= 0.7= 0.80= 0.90= 0.91= 0.93= 1.00= 1.01= 2.00= 2.01= 2.02= 2.03= 3.00≤ 3.02 |
Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the current working directory, related to an unset SYSTEM_XPDFRC macro in a Gentoo build process that uses the poppler library.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free