CVE-2009-1187

Published: Apr 23, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).

Affected (48)

Products: Poppler: Poppler

1 product

Configuration A

48 vulnerable

Vulnerable Software	Affected Versions
Poppler Poppler	Up to 0.10.5
Poppler Poppler	Version 0.1.1
Poppler Poppler	Version 0.1.2
Poppler Poppler	Version 0.10.0
Poppler Poppler	Version 0.10.1
Poppler Poppler	Version 0.10.2
Poppler Poppler	Version 0.10.3
Poppler Poppler	Version 0.10.4
Poppler Poppler	Version 0.1
Poppler Poppler	Version 0.2.0
Poppler Poppler	Version 0.3.0
Poppler Poppler	Version 0.3.1
Poppler Poppler	Version 0.3.2
Poppler Poppler	Version 0.3.3
Poppler Poppler	Version 0.4.0
Poppler Poppler	Version 0.4.1
Poppler Poppler	Version 0.4.2
Poppler Poppler	Version 0.4.3
Poppler Poppler	Version 0.4.4
Poppler Poppler	Version 0.5.0
Poppler Poppler	Version 0.5.1
Poppler Poppler	Version 0.5.2
Poppler Poppler	Version 0.5.3
Poppler Poppler	Version 0.5.4
Poppler Poppler	Version 0.5.90
Poppler Poppler	Version 0.5.91
Poppler Poppler	Version 0.5.9
Poppler Poppler	Version 0.6.0
Poppler Poppler	Version 0.6.1
Poppler Poppler	Version 0.6.2
Poppler Poppler	Version 0.6.3
Poppler Poppler	Version 0.6.4
Poppler Poppler	Version 0.7.0
Poppler Poppler	Version 0.7.1
Poppler Poppler	Version 0.7.2
Poppler Poppler	Version 0.7.3
Poppler Poppler	Version 0.8.0
Poppler Poppler	Version 0.8.1
Poppler Poppler	Version 0.8.2
Poppler Poppler	Version 0.8.3
Poppler Poppler	Version 0.8.4
Poppler Poppler	Version 0.8.5
Poppler Poppler	Version 0.8.6
Poppler Poppler	Version 0.8.7
Poppler Poppler	Version 0.9.0
Poppler Poppler	Version 0.9.1
Poppler Poppler	Version 0.9.2
Poppler Poppler	Version 0.9.3

Related CWEs

References (40)

http://bugs.gentoo.org/show_bug.cgi?id=263028#c16

Source: secalert@redhat.com

Patch

http://poppler.freedesktop.org/releases.html

Source: secalert@redhat.com

http://secunia.com/advisories/34746

Source: secalert@redhat.com

http://secunia.com/advisories/35064

Source: secalert@redhat.com

http://secunia.com/advisories/35618

Source: secalert@redhat.com

http://wiki.rpath.com/Advisories:rPSA-2009-0059

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/196617

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2010:087

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2011:175

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2009-0480.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/502761/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/34568

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/1076

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/1040

Source: secalert@redhat.com

https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/50184

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10292

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html

Source: secalert@redhat.com

http://bugs.gentoo.org/show_bug.cgi?id=263028#c16

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://poppler.freedesktop.org/releases.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34746

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35064

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35618

Source: af854a3a-2127-422b-91ae-364da2661108

http://wiki.rpath.com/Advisories:rPSA-2009-0059

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/196617

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2010:087

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2011:175

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2009-0480.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/502761/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/34568

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/1076

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/1040

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/50184

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10292

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.