Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2009-04-23	CVE-2009-0146	Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) JBIG2Stream::readSymbolDictSeg. network foolabs glyphandcog apple CWE-119	4.3
2009-04-09	CVE-2009-1144	Code Injection vulnerability in multiple products Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the current working directory, related to an unset SYSTEM_XPDFRC macro in a Gentoo build process that uses the poppler library. local foolabs glyphandcog gentoo CWE-94	6.9