Referenced CVEs:
CVE-2009-3603, CVE-2009-3604, CVE-2009-3607, CVE-2009-3608, CVE-2009-3609


Description:
===========================================================Ubuntu Security Notice USN-850-3 November 02, 2009poppler vulnerabilitiesCVE-2009-3603, CVE-2009-3604, CVE-2009-3607, CVE-2009-3608,CVE-2009-3609===========================================================A security issue affects the following Ubuntu releases:Ubuntu 9.10This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 9.10: libpoppler-glib4 0.12.0-0ubuntu2.1 libpoppler5 0.12.0-0ubuntu2.1In general, a standard system upgrade is sufficient to effect thenecessary changes.Details follow:USN-850-1 fixed vulnerabilities in poppler. This update provides thecorresponding updates for Ubuntu 9.10.Original advisory details: It was discovered that poppler contained multiple security issues when parsing malformed PDF documents. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program.





More...