CVE-2009-1188

Published: Apr 23, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.

Affected (48)

Products: Poppler: Poppler

Poppler

1 product

Poppler

Configuration A

48 vulnerable

Vulnerable Software	Affected Versions
Poppler Poppler	Up to 0.10.5
Poppler Poppler	Version 0.1.1
Poppler Poppler	Version 0.1.2
Poppler Poppler	Version 0.10.0
Poppler Poppler	Version 0.10.1
Poppler Poppler	Version 0.10.2
Poppler Poppler	Version 0.10.3
Poppler Poppler	Version 0.10.4
Poppler Poppler	Version 0.1
Poppler Poppler	Version 0.2.0
Poppler Poppler	Version 0.3.0
Poppler Poppler	Version 0.3.1
Poppler Poppler	Version 0.3.2
Poppler Poppler	Version 0.3.3
Poppler Poppler	Version 0.4.0
Poppler Poppler	Version 0.4.1
Poppler Poppler	Version 0.4.2
Poppler Poppler	Version 0.4.3
Poppler Poppler	Version 0.4.4
Poppler Poppler	Version 0.5.0
Poppler Poppler	Version 0.5.1
Poppler Poppler	Version 0.5.2
Poppler Poppler	Version 0.5.3
Poppler Poppler	Version 0.5.4
Poppler Poppler	Version 0.5.90
Poppler Poppler	Version 0.5.91
Poppler Poppler	Version 0.5.9
Poppler Poppler	Version 0.6.0
Poppler Poppler	Version 0.6.1
Poppler Poppler	Version 0.6.2
Poppler Poppler	Version 0.6.3
Poppler Poppler	Version 0.6.4
Poppler Poppler	Version 0.7.0
Poppler Poppler	Version 0.7.1
Poppler Poppler	Version 0.7.2
Poppler Poppler	Version 0.7.3
Poppler Poppler	Version 0.8.0
Poppler Poppler	Version 0.8.1
Poppler Poppler	Version 0.8.2
Poppler Poppler	Version 0.8.3
Poppler Poppler	Version 0.8.4
Poppler Poppler	Version 0.8.5
Poppler Poppler	Version 0.8.6
Poppler Poppler	Version 0.8.7
Poppler Poppler	Version 0.9.0
Poppler Poppler	Version 0.9.1
Poppler Poppler	Version 0.9.2
Poppler Poppler	Version 0.9.3

Related CWEs

CWE-189

References (84)

http://bugs.gentoo.org/show_bug.cgi?id=263028#c16

Source: secalert@redhat.com

Patch

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html

Source: secalert@redhat.com

http://poppler.freedesktop.org/releases.html

Source: secalert@redhat.com

http://secunia.com/advisories/34746

Source: secalert@redhat.com

http://secunia.com/advisories/35064

Source: secalert@redhat.com

http://secunia.com/advisories/35618

Source: secalert@redhat.com

http://secunia.com/advisories/37028

Source: secalert@redhat.com

http://secunia.com/advisories/37037

Source: secalert@redhat.com

http://secunia.com/advisories/37043

Source: secalert@redhat.com

http://secunia.com/advisories/37053

Source: secalert@redhat.com

http://secunia.com/advisories/37077

Source: secalert@redhat.com

http://secunia.com/advisories/37079

Source: secalert@redhat.com

http://secunia.com/advisories/39327

Source: secalert@redhat.com

http://secunia.com/advisories/39938

Source: secalert@redhat.com

http://wiki.rpath.com/Advisories:rPSA-2009-0059

Source: secalert@redhat.com

http://www.debian.org/security/2010/dsa-2028

Source: secalert@redhat.com

http://www.debian.org/security/2010/dsa-2050

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/196617

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2010:087

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2011:175

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2009-0480.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/502761/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/34568

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/1076

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/2928

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/0802

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/1040

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/1220

Source: secalert@redhat.com

https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=495907

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=526915

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/50185

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9957

Source: secalert@redhat.com

https://rhn.redhat.com/errata/RHSA-2009-1501.html

Source: secalert@redhat.com

https://rhn.redhat.com/errata/RHSA-2009-1502.html

Source: secalert@redhat.com

https://rhn.redhat.com/errata/RHSA-2009-1503.html

Source: secalert@redhat.com

https://rhn.redhat.com/errata/RHSA-2009-1512.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html

Source: secalert@redhat.com

http://bugs.gentoo.org/show_bug.cgi?id=263028#c16