CVE-2009-0791

medium

Description

Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179.

References

https://bugzilla.redhat.com/show_bug.cgi?id=491840

http://www.vupen.com/english/advisories/2009/1488

http://www.redhat.com/support/errata/RHSA-2009-1083.html

http://securitytracker.com/id?1022326

http://www.securityfocus.com/bid/35195

http://secunia.com/advisories/35340

http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html

http://secunia.com/advisories/35685

https://rhn.redhat.com/errata/RHSA-2009-1501.html

http://secunia.com/advisories/37028

http://secunia.com/advisories/37037

http://secunia.com/advisories/37077

https://rhn.redhat.com/errata/RHSA-2009-1503.html

https://rhn.redhat.com/errata/RHSA-2009-1502.html

http://www.vupen.com/english/advisories/2009/2928

https://rhn.redhat.com/errata/RHSA-2009-1512.html

http://secunia.com/advisories/37023

https://rhn.redhat.com/errata/RHSA-2009-1500.html

http://secunia.com/advisories/37043

http://secunia.com/advisories/37079

http://www.mandriva.com/security/advisories?name=MDVSA-2009:334

https://exchange.xforce.ibmcloud.com/vulnerabilities/50941

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10534

Details

Source: MITRE

Published: 2009-06-09

Updated: 2023-02-13

Type: CWE-189

Risk Information

CVSS v2

Base Score: 6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 8.6

Severity: MEDIUM