CVE Vulnerabilities

CVE-2009-3605

Published: Nov 02, 2009 | Modified: Nov 07, 2023
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, related to (1) glib/poppler-page.cc; (2) ArthurOutputDev.cc, (3) CairoOutputDev.cc, (4) GfxState.cc, (5) JBIG2Stream.cc, (6) PSOutputDev.cc, and (7) SplashOutputDev.cc in poppler/; and (8) SplashBitmap.cc, (9) Splash.cc, and (10) SplashFTFont.cc in splash/. NOTE: this may overlap CVE-2009-0791.

Affected Software

Name Vendor Start Version End Version
Poppler Poppler 0.7.3 0.7.3
Poppler Poppler 0.3.2 0.3.2
Poppler Poppler 0.10.3 0.10.3
Poppler Poppler 0.4.0 0.4.0
Poppler Poppler 0.8.5 0.8.5
Poppler Poppler 0.9.3 0.9.3
Poppler Poppler 0.10.1 0.10.1
Poppler Poppler 0.10.0 0.10.0
Poppler Poppler 0.7.1 0.7.1
Poppler Poppler 0.6.1 0.6.1
Poppler Poppler 0.3.1 0.3.1
Poppler Poppler 0.5.2 0.5.2
Poppler Poppler 0.5.91 0.5.91
Poppler Poppler 0.6.0 0.6.0
Poppler Poppler 0.3.3 0.3.3
Poppler Poppler 0.4.2 0.4.2
Poppler Poppler 0.10.4 0.10.4
Poppler Poppler 0.9.2 0.9.2
Poppler Poppler 0.6.4 0.6.4
Poppler Poppler 0.1.2 0.1.2
Poppler Poppler 0.8.0 0.8.0
Poppler Poppler 0.8.3 0.8.3
Poppler Poppler 0.7.0 0.7.0
Poppler Poppler 0.7.2 0.7.2
Poppler Poppler 0.5.0 0.5.0
Poppler Poppler 0.8.6 0.8.6
Poppler Poppler 0.5.9 0.5.9
Poppler Poppler 0.5.90 0.5.90
Poppler Poppler 0.6.3 0.6.3
Poppler Poppler 0.2.0 0.2.0
Poppler Poppler 0.8.4 0.8.4
Poppler Poppler 0.5.4 0.5.4
Poppler Poppler 0.1.1 0.1.1
Poppler Poppler 0.9.0 0.9.0
Poppler Poppler 0.4.1 0.4.1
Poppler Poppler 0.5.3 0.5.3
Poppler Poppler * 0.10.5
Poppler Poppler 0.4.4 0.4.4
Poppler Poppler 0.8.7 0.8.7
Poppler Poppler 0.9.1 0.9.1
Poppler Poppler 0.3.0 0.3.0
Poppler Poppler 0.1 0.1
Poppler Poppler 0.6.2 0.6.2
Poppler Poppler 0.10.2 0.10.2
Poppler Poppler 0.4.3 0.4.3
Poppler Poppler 0.8.1 0.8.1
Poppler Poppler 0.5.1 0.5.1
Poppler Poppler 0.8.2 0.8.2

References