Published: 23/04/2009 Updated: 06/03/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and previous versions, CUPS 1.3.9 and previous versions, and other products allow remote malicious users to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.

Vulnerable Product	Search on Vulmon	Subscribe to Product
glyphandcog xpdfreader
glyphandcog xpdfreader 3.00
foolabs xpdf 1.00a
glyphandcog xpdfreader 1.00
foolabs xpdf 0.92c
foolabs xpdf 0.92b
glyphandcog xpdfreader 0.80
foolabs xpdf 0.7a
glyphandcog xpdfreader 0.2
glyphandcog xpdfreader 2.00
glyphandcog xpdfreader 1.01
foolabs xpdf 0.92e
foolabs xpdf 0.92d
glyphandcog xpdfreader 0.91
glyphandcog xpdfreader 0.90
glyphandcog xpdfreader 0.4
glyphandcog xpdfreader 0.3
glyphandcog xpdfreader 2.02
glyphandcog xpdfreader 2.01
foolabs xpdf 0.93a
glyphandcog xpdfreader 0.93
foolabs xpdf 0.91b
foolabs xpdf 0.91a
foolabs xpdf 0.5a
glyphandcog xpdfreader 0.5
glyphandcog xpdfreader 3.01
glyphandcog xpdfreader 2.03
foolabs xpdf 0.93c
foolabs xpdf 0.93b
foolabs xpdf 0.92a
glyphandcog xpdfreader 0.92
foolabs xpdf 0.91c
glyphandcog xpdfreader 0.7
glyphandcog xpdfreader 0.6
apple cups 1.3.3
apple cups 1.3.4
apple cups 1.3.5
apple cups 1.2.4
apple cups 1.2.3
apple cups 1.2.11
apple cups 1.2.12
apple cups 1.1.3
apple cups 1.1.4
apple cups 1.1.6-2
apple cups 1.1.8
apple cups 1.1.11
apple cups 1.1.14
apple cups 1.1.19
apple cups 1.1.20
apple cups 1.1.21
apple cups 1.3.11
apple cups 1.3.2
apple cups 1.2.0
apple cups 1.2.5
apple cups 1.2.9
apple cups 1.2.10
apple cups 1.1.6
apple cups 1.1.6-1
apple cups 1.1.2
apple cups 1.1.10
apple cups 1.1.6-3
apple cups 1.1.17
apple cups 1.1.12
apple cups 1.1.23
apple cups 1.3.0
apple cups 1.3.1
apple cups 1.3.10
apple cups 1.2.1
apple cups 1.2.7
apple cups 1.2.8
apple cups 1.1.5-1
apple cups 1.1.5-2
apple cups 1.1.9-1
apple cups 1.1.10-1
apple cups 1.1.15
apple cups 1.1.18
apple cups 1.1.22
apple cups
apple cups 1.3.6
apple cups 1.3.8
apple cups 1.3.7
apple cups 1.2.2
apple cups 1.2.6
apple cups 1.1
apple cups 1.1.1
apple cups 1.1.5
apple cups 1.1.9
apple cups 1.1.7
apple cups 1.1.16
apple cups 1.1.13

Debian Bug report logs - #524806 poppler: multiple vulnerabilities Package: poppler; Maintainer for poppler is Debian freedesktoporg maintainers <pkg-freedesktop-maintainers@listsaliothdebianorg>; Reported by: "Michael S Gilbert" <michaelsgilbert@gmailcom> Date: Mon, 20 Apr 2009 02:06:01 UTC Severity: grave T ...

Debian Bug report logs - #524809 xpdf: multiple vulnerabilities Package: xpdf; Maintainer for xpdf is Debian QA Group <packages@qadebianorg>; Source for xpdf is src:xpdf (PTS, buildd, popcon) Reported by: "Michael S Gilbert" <michaelsgilbert@gmailcom> Date: Mon, 20 Apr 2009 02:27:02 UTC Severity: grave Tags: s ...

PDF import support has been disabled in KWord due to many security vulnerabilities that could be used by an attacker to run programs as your login ...

Will Dormann, Alin Rad Pop, Braden Thomas, and Drew Yao discovered that poppler contained multiple security issues in its JBIG2 decoder If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program ...

Several vulnerabilities have been identified in xpdf, a suite of tools for viewing and converting Portable Document Format (PDF) files The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-0146 Multiple buffer overflows in the JBIG2 decoder in Xpdf 302pl2 and earlier, CUPS 139 and earlier, and oth ...

Synopsis Important: xpdf security update Type/Severity Security Advisory: Important Topic An updated xpdf package that fixes multiple security issues is nowavailable for Red Hat Enterprise Linux 3 and 4This update has been rated as having important security impact by the RedHat Security Response Team ...

Synopsis Important: gpdf security update Type/Severity Security Advisory: Important Topic An updated gpdf package that fixes multiple security issues is nowavailable for Red Hat Enterprise Linux 4This update has been rated as having important security impact by the RedHat Security Response Team D ...

Synopsis Important: cups security update Type/Severity Security Advisory: Important Topic Updated cups packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 4 and 5This update has been rated as having important security impact by the RedHat Security Response Team ...

Synopsis Important: poppler security update Type/Severity Security Advisory: Important Topic Updated poppler packages that fix multiple security issues are nowavailable for Red Hat Enterprise Linux 5This update has been rated as having important security impact by the RedHat Security Response Team ...

Synopsis Important: kdegraphics security update Type/Severity Security Advisory: Important Topic Updated kdegraphics packages that fix multiple security issues are nowavailable for Red Hat Enterprise Linux 4 and 5This update has been rated as having important security impact by the RedHat Security Response ...

Get Started

CVE-2009-0147

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect