CVE-2009-1144

CVE-2009-1144 is an untrusted search path vulnerability affecting the Gentoo package of Xpdf prior to version 3.02-r2. This flaw allows local attackers to gain privileges by tricking the application into executing a malicious xpdfrc file from the current working directory, stemming from an unset SYSTEM_XPDFRC macro during the Gentoo build process. With a CVSS score of 6.9, this vulnerability is of medium severity, requiring local access and moderate attack complexity, but potentially leading to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.