CVE Vulnerabilities

CVE-2009-1188

Published: Apr 23, 2009 | Modified: Oct 10, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
6.8 IMPORTANT
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu

Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.

Affected Software

Name Vendor Start Version End Version
Poppler Poppler 0.1 0.1
Poppler Poppler 0.1.1 0.1.1
Poppler Poppler 0.1.2 0.1.2
Poppler Poppler 0.2.0 0.2.0
Poppler Poppler 0.3.0 0.3.0
Poppler Poppler 0.3.1 0.3.1
Poppler Poppler 0.3.2 0.3.2
Poppler Poppler 0.3.3 0.3.3
Poppler Poppler 0.4.0 0.4.0
Poppler Poppler 0.4.1 0.4.1
Poppler Poppler 0.4.2 0.4.2
Poppler Poppler 0.4.3 0.4.3
Poppler Poppler 0.4.4 0.4.4
Poppler Poppler 0.5.0 0.5.0
Poppler Poppler 0.5.1 0.5.1
Poppler Poppler 0.5.2 0.5.2
Poppler Poppler 0.5.3 0.5.3
Poppler Poppler 0.5.4 0.5.4
Poppler Poppler 0.5.9 0.5.9
Poppler Poppler 0.5.90 0.5.90
Poppler Poppler 0.5.91 0.5.91
Poppler Poppler 0.6.0 0.6.0
Poppler Poppler 0.6.1 0.6.1
Poppler Poppler 0.6.2 0.6.2
Poppler Poppler 0.6.3 0.6.3
Poppler Poppler 0.6.4 0.6.4
Poppler Poppler 0.7.0 0.7.0
Poppler Poppler 0.7.1 0.7.1
Poppler Poppler 0.7.2 0.7.2
Poppler Poppler 0.7.3 0.7.3
Poppler Poppler 0.8.0 0.8.0
Poppler Poppler 0.8.1 0.8.1
Poppler Poppler 0.8.2 0.8.2
Poppler Poppler 0.8.3 0.8.3
Poppler Poppler 0.8.4 0.8.4
Poppler Poppler 0.8.5 0.8.5
Poppler Poppler 0.8.6 0.8.6
Poppler Poppler 0.8.7 0.8.7
Poppler Poppler 0.9.0 0.9.0
Poppler Poppler 0.9.1 0.9.1
Poppler Poppler 0.9.2 0.9.2
Poppler Poppler 0.9.3 0.9.3
Poppler Poppler 0.10.0 0.10.0
Poppler Poppler 0.10.1 0.10.1
Poppler Poppler 0.10.2 0.10.2
Poppler Poppler 0.10.3 0.10.3
Poppler Poppler 0.10.4 0.10.4
Poppler Poppler * 0.10.5
Red Hat Enterprise Linux 4 RedHat xpdf-1:3.00-22.el4_8.1 *
Red Hat Enterprise Linux 4 RedHat gpdf-0:2.8.2-7.7.2.el4_8.5 *
Red Hat Enterprise Linux 4 RedHat kdegraphics-7:3.3.1-15.el4_8.2 *
Red Hat Enterprise Linux 5 RedHat poppler-0:0.5.4-4.4.el5_3.9 *
Red Hat Enterprise Linux 5 RedHat kdegraphics-7:3.5.4-15.el5_4.2 *
Cups Ubuntu upstream *
Cupsys Ubuntu upstream *
Gpdf Ubuntu dapper *
Ipe Ubuntu dapper *
Ipe Ubuntu jaunty *
Ipe Ubuntu karmic *
Koffice Ubuntu dapper *
Libextractor Ubuntu artful *
Libextractor Ubuntu cosmic *
Libextractor Ubuntu dapper *
Libextractor Ubuntu disco *
Libextractor Ubuntu eoan *
Libextractor Ubuntu groovy *
Libextractor Ubuntu hardy *
Libextractor Ubuntu hirsute *
Libextractor Ubuntu jaunty *
Libextractor Ubuntu karmic *
Libextractor Ubuntu lucid *
Libextractor Ubuntu maverick *
Libextractor Ubuntu natty *
Libextractor Ubuntu oneiric *
Libextractor Ubuntu precise *
Libextractor Ubuntu quantal *
Libextractor Ubuntu raring *
Libextractor Ubuntu saucy *
Libextractor Ubuntu trusty *
Libextractor Ubuntu utopic *
Libextractor Ubuntu vivid *
Libextractor Ubuntu wily *
Libextractor Ubuntu xenial *
Libextractor Ubuntu yakkety *
Libextractor Ubuntu zesty *
Pdfkit.framework Ubuntu dapper *
Pdftohtml Ubuntu dapper *
Poppler Ubuntu artful *
Poppler Ubuntu bionic *
Poppler Ubuntu cosmic *
Poppler Ubuntu dapper *
Poppler Ubuntu devel *
Poppler Ubuntu disco *
Poppler Ubuntu eoan *
Poppler Ubuntu esm-infra/xenial *
Poppler Ubuntu focal *
Poppler Ubuntu groovy *
Poppler Ubuntu hardy *
Poppler Ubuntu hirsute *
Poppler Ubuntu impish *
Poppler Ubuntu intrepid *
Poppler Ubuntu jammy *
Poppler Ubuntu jaunty *
Poppler Ubuntu karmic *
Poppler Ubuntu lucid *
Poppler Ubuntu maverick *
Poppler Ubuntu natty *
Poppler Ubuntu oneiric *
Poppler Ubuntu precise *
Poppler Ubuntu quantal *
Poppler Ubuntu raring *
Poppler Ubuntu saucy *
Poppler Ubuntu trusty *
Poppler Ubuntu utopic *
Poppler Ubuntu vivid *
Poppler Ubuntu vivid/stable-phone-overlay *
Poppler Ubuntu wily *
Poppler Ubuntu xenial *
Poppler Ubuntu yakkety *
Poppler Ubuntu zesty *
Xpdf Ubuntu dapper *
Xpdf Ubuntu hardy *
Xpdf Ubuntu jaunty *
Xpdf Ubuntu karmic *
Xpdf Ubuntu upstream *

References