Published: 23/04/2009 Updated: 06/03/2019

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and previous versions, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to "g*allocn."

Vulnerable Product	Search on Vulmon	Subscribe to Product
foolabs xpdf 0.91a
glyphandcog xpdfreader 0.90
glyphandcog xpdfreader 0.4
glyphandcog xpdfreader 0.3
glyphandcog xpdfreader 1.01
foolabs xpdf 0.93c
foolabs xpdf 0.92d
foolabs xpdf 0.92a
foolabs xpdf 0.92b
glyphandcog xpdfreader
glyphandcog xpdfreader 3.01
glyphandcog xpdfreader 0.91
glyphandcog xpdfreader 0.6
foolabs xpdf 0.5a
glyphandcog xpdfreader 2.03
glyphandcog xpdfreader 2.00
foolabs xpdf 0.92e
glyphandcog xpdfreader 0.93
glyphandcog xpdfreader 0.80
foolabs xpdf 0.7a
glyphandcog xpdfreader 0.92
glyphandcog xpdfreader 0.2
glyphandcog xpdfreader 0.7
foolabs xpdf 1.00a
glyphandcog xpdfreader 2.02
foolabs xpdf 0.93a
foolabs xpdf 0.93b
foolabs xpdf 0.91c
foolabs xpdf 0.91b
glyphandcog xpdfreader 0.5
glyphandcog xpdfreader 1.00
glyphandcog xpdfreader 2.01
foolabs xpdf 0.92c
glyphandcog xpdfreader 3.00
foolabs xpdf 3.0.1

Debian Bug report logs - #524809 xpdf: multiple vulnerabilities Package: xpdf; Maintainer for xpdf is Debian QA Group <packages@qadebianorg>; Source for xpdf is src:xpdf (PTS, buildd, popcon) Reported by: "Michael S Gilbert" <michaelsgilbert@gmailcom> Date: Mon, 20 Apr 2009 02:27:02 UTC Severity: grave Tags: s ...

PDF import support has been disabled in KWord due to many security vulnerabilities that could be used by an attacker to run programs as your login ...

Several vulnerabilities have been identified in xpdf, a suite of tools for viewing and converting Portable Document Format (PDF) files The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-0146 Multiple buffer overflows in the JBIG2 decoder in Xpdf 302pl2 and earlier, CUPS 139 and earlier, and oth ...

CWE-189 http://bugs.gentoo.org/show_bug.cgi?id=263028 http://secunia.com/advisories/34852 http://www.securityfocus.com/bid/34568 http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:101 http://www.debian.org/security/2009/dsa-1790 http://secunia.com/advisories/34959 http://secunia.com/advisories/35037 http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477 http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html http://secunia.com/advisories/35065 http://secunia.com/advisories/35074 http://www.vupen.com/english/advisories/2009/1297 http://support.apple.com/kb/HT3549 http://www.us-cert.gov/cas/techalerts/TA09-133A.html http://lists.apple.com/archives/security-announce/2009/May/msg00002.html http://secunia.com/advisories/34991 http://www.debian.org/security/2009/dsa-1793 http://www.vupen.com/english/advisories/2009/1621 http://support.apple.com/kb/HT3639 http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html http://secunia.com/advisories/35685 https://exchange.xforce.ibmcloud.com/vulnerabilities/50377 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=524809 https://usn.ubuntu.com/973-1/https://nvd.nist.gov

CVE-2009-0165

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect