Published: 03/03/2009 Updated: 10/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The FormWidgetChoice::loadDefaults function in Poppler prior to 0.10.4 allows remote malicious users to cause a denial of service (crash) via a PDF file with an invalid Form Opt entry.

Vulnerable Product	Search on Vulmon	Subscribe to Product
poppler poppler 0.1.1
poppler poppler 0.1.2
poppler poppler 0.7.1
poppler poppler 0.7.2
poppler poppler 0.3.3
poppler poppler 0.5.2
poppler poppler 0.5.3
poppler poppler 0.6.3
poppler poppler 0.1
poppler poppler 0.5.91
poppler poppler 0.8.4
poppler poppler 0.4.1
poppler poppler 0.4.0
poppler poppler 0.5.9
poppler poppler 0.5.4
poppler poppler 0.10.2
poppler poppler 0.10.1
poppler poppler 0.3.1
poppler poppler 0.3.2
poppler poppler 0.4.2
poppler poppler 0.4.3
poppler poppler 0.4.4
poppler poppler 0.5.90
poppler poppler 0.6.0
poppler poppler
poppler poppler 0.2.0
poppler poppler 0.3.0
poppler poppler 0.6.4
poppler poppler 0.7.0
poppler poppler 0.7.3
poppler poppler 0.5.1
poppler poppler 0.5.0
poppler poppler 0.6.2
poppler poppler 0.6.1

It was discovered that poppler contained multiple security issues when parsing malformed PDF documents If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program ...

Debian Bug report logs - #524806 poppler: multiple vulnerabilities Package: poppler; Maintainer for poppler is Debian freedesktoporg maintainers <pkg-freedesktop-maintainers@listsaliothdebianorg>; Reported by: "Michael S Gilbert" <michaelsgilbert@gmailcom> Date: Mon, 20 Apr 2009 02:06:01 UTC Severity: grave T ...

Debian Bug report logs - #518478 several crashes (DoS) Package: libpoppler5; Maintainer for libpoppler5 is (unknown); Reported by: Steffen Joeris <steffenjoeris@skolelinuxde> Date: Fri, 6 Mar 2009 13:36:01 UTC Severity: important Tags: patch, security Found in version poppler/087-1 Fixed in version 0104-1 Done: Ja ...

Several integer overflows, buffer overflows and memory allocation errors were discovered in the Poppler PDF rendering library, which may lead to denial of service or the execution of arbitrary code if a user is tricked into opening a malformed PDF document An update for the old stable distribution (etch) will be issued soon as version 045-51etc ...

source: wwwsecurityfocuscom/bid/33749/info Poppler is prone to multiple denial-of-service vulnerabilities when handling malformed PDF files Successfully exploiting this issue allows remote attackers to crash applications that use the vulnerable library, denying service to legitimate users These issues affect versions prior to Poppler ...

NVD-CWE-Other http://secunia.com/advisories/33853 http://www.openwall.com/lists/oss-security/2009/02/19/2 http://bugs.freedesktop.org/show_bug.cgi?id=19790 http://www.openwall.com/lists/oss-security/2009/02/13/1 http://lists.freedesktop.org/archives/poppler/2009-January/004406.html http://wiki.rpath.com/Advisories:rPSA-2009-0059 http://www.securityfocus.com/bid/33749 http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html http://secunia.com/advisories/35685 http://secunia.com/advisories/37114 http://www.ubuntu.com/usn/USN-850-1 http://www.debian.org/security/2009/dsa-1941 http://www.securityfocus.com/archive/1/502761/100/0/threaded https://usn.ubuntu.com/850-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/32800/

CVE-2009-0755

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect