csaf_redhat - rhsa-2009

rhsa-2009_0458

Vulnerability from csaf_redhat

Published

2009-04-30 20:55

Modified

2024-11-22 03:03

Summary

Red Hat Security Advisory: gpdf security update

Notes

Topic

An updated gpdf package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team.

Details

GPdf is a viewer for Portable Document Format (PDF) files. Multiple integer overflow flaws were found in GPdf's JBIG2 decoder. An attacker could create a malicious PDF file that would cause GPdf to crash or, potentially, execute arbitrary code when opened. (CVE-2009-0147, CVE-2009-1179) Multiple buffer overflow flaws were found in GPdf's JBIG2 decoder. An attacker could create a malicious PDF file that would cause GPdf to crash or, potentially, execute arbitrary code when opened. (CVE-2009-0146, CVE-2009-1182) Multiple flaws were found in GPdf's JBIG2 decoder that could lead to the freeing of arbitrary memory. An attacker could create a malicious PDF file that would cause GPdf to crash or, potentially, execute arbitrary code when opened. (CVE-2009-0166, CVE-2009-1180) Multiple input validation flaws were found in GPdf's JBIG2 decoder. An attacker could create a malicious PDF file that would cause GPdf to crash or, potentially, execute arbitrary code when opened. (CVE-2009-0800) Multiple denial of service flaws were found in GPdf's JBIG2 decoder. An attacker could create a malicious PDF that would cause GPdf to crash when opened. (CVE-2009-0799, CVE-2009-1181, CVE-2009-1183) Red Hat would like to thank Braden Thomas and Drew Yao of the Apple Product Security team, and Will Dormann of the CERT/CC for responsibly reporting these flaws. Users are advised to upgrade to this updated package, which contains backported patches to correct these issues.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated gpdf package that fixes multiple security issues is now\navailable for Red Hat Enterprise Linux 4.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "GPdf is a viewer for Portable Document Format (PDF) files.\n\nMultiple integer overflow flaws were found in GPdf\u0027s JBIG2 decoder. An\nattacker could create a malicious PDF file that would cause GPdf to crash\nor, potentially, execute arbitrary code when opened. (CVE-2009-0147,\nCVE-2009-1179)\n\nMultiple buffer overflow flaws were found in GPdf\u0027s JBIG2 decoder. An\nattacker could create a malicious PDF file that would cause GPdf to crash\nor, potentially, execute arbitrary code when opened. (CVE-2009-0146,\nCVE-2009-1182)\n\nMultiple flaws were found in GPdf\u0027s JBIG2 decoder that could lead to the\nfreeing of arbitrary memory. An attacker could create a malicious PDF file\nthat would cause GPdf to crash or, potentially, execute arbitrary code when\nopened. (CVE-2009-0166, CVE-2009-1180)\n\nMultiple input validation flaws were found in GPdf\u0027s JBIG2 decoder. An\nattacker could create a malicious PDF file that would cause GPdf to crash\nor, potentially, execute arbitrary code when opened. (CVE-2009-0800)\n\nMultiple denial of service flaws were found in GPdf\u0027s JBIG2 decoder. An\nattacker could create a malicious PDF that would cause GPdf to crash when\nopened. (CVE-2009-0799, CVE-2009-1181, CVE-2009-1183)\n\nRed Hat would like to thank Braden Thomas and Drew Yao of the Apple Product\nSecurity team, and Will Dormann of the CERT/CC for responsibly reporting\nthese flaws.\n\nUsers are advised to upgrade to this updated package, which contains\nbackported patches to correct these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2009:0458",
        "url": "https://access.redhat.com/errata/RHSA-2009:0458"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "490612",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490612"
      },
      {
        "category": "external",
        "summary": "490614",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490614"
      },
      {
        "category": "external",
        "summary": "490625",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490625"
      },
      {
        "category": "external",
        "summary": "491864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=491864"
      },
      {
        "category": "external",
        "summary": "495886",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495886"
      },
      {
        "category": "external",
        "summary": "495887",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495887"
      },
      {
        "category": "external",
        "summary": "495889",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495889"
      },
      {
        "category": "external",
        "summary": "495892",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495892"
      },
      {
        "category": "external",
        "summary": "495894",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495894"
      },
      {
        "category": "external",
        "summary": "495896",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495896"
      },
      {
        "category": "external",
        "summary": "495899",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495899"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0458.json"
      }
    ],
    "title": "Red Hat Security Advisory: gpdf security update",
    "tracking": {
      "current_release_date": "2024-11-22T03:03:43+00:00",
      "generator": {
        "date": "2024-11-22T03:03:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2009:0458",
      "initial_release_date": "2009-04-30T20:55:00+00:00",
      "revision_history": [
        {
          "date": "2009-04-30T20:55:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2009-04-30T16:58:15+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T03:03:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4",
                  "product_id": "4AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop version 4",
                  "product_id": "4Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4",
                  "product_id": "4ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4",
                  "product_id": "4WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
                "product": {
                  "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
                  "product_id": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf-debuginfo@2.8.2-7.7.2.el4_7.4?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
                "product": {
                  "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
                  "product_id": "gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf@2.8.2-7.7.2.el4_7.4?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
                "product": {
                  "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
                  "product_id": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf-debuginfo@2.8.2-7.7.2.el4_7.4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
                "product": {
                  "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
                  "product_id": "gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf@2.8.2-7.7.2.el4_7.4?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
                "product": {
                  "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
                  "product_id": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf-debuginfo@2.8.2-7.7.2.el4_7.4?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
                "product": {
                  "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
                  "product_id": "gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf@2.8.2-7.7.2.el4_7.4?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.src",
                "product": {
                  "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.src",
                  "product_id": "gpdf-0:2.8.2-7.7.2.el4_7.4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf@2.8.2-7.7.2.el4_7.4?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
                "product": {
                  "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
                  "product_id": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf-debuginfo@2.8.2-7.7.2.el4_7.4?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
                "product": {
                  "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
                  "product_id": "gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf@2.8.2-7.7.2.el4_7.4?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
                "product": {
                  "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
                  "product_id": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf-debuginfo@2.8.2-7.7.2.el4_7.4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
                "product": {
                  "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
                  "product_id": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf@2.8.2-7.7.2.el4_7.4?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
                "product": {
                  "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
                  "product_id": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf-debuginfo@2.8.2-7.7.2.el4_7.4?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
                "product": {
                  "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
                  "product_id": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf@2.8.2-7.7.2.el4_7.4?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.src as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.src",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.src as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.src",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.src as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.src",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.src as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.src",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
        "relates_to_product_reference": "4WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Drew Yao",
            "Braden Thomas"
          ],
          "organization": "Apple Product Security"
        }
      ],
      "cve": "CVE-2009-0146",
      "discovery_date": "2009-03-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "490612"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) JBIG2Stream::readSymbolDictSeg.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-0146"
        },
        {
          "category": "external",
          "summary": "RHBZ#490612",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490612"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-0146",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-0146"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0146",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0146"
        }
      ],
      "release_date": "2009-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-04-30T20:55:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0458"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Braden Thomas"
          ]
        },
        {
          "names": [
            "Drew Yao"
          ],
          "organization": "Apple Product Security team"
        }
      ],
      "cve": "CVE-2009-0147",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2009-03-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "490614"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xpdf: Multiple integer overflows in JBIG2 decoder",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-0147"
        },
        {
          "category": "external",
          "summary": "RHBZ#490614",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490614"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-0147",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-0147"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0147",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0147"
        }
      ],
      "release_date": "2009-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-04-30T20:55:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0458"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xpdf: Multiple integer overflows in JBIG2 decoder"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Braden Thomas"
          ]
        },
        {
          "names": [
            "Drew Yao"
          ],
          "organization": "Apple Product Security team"
        }
      ],
      "cve": "CVE-2009-0166",
      "discovery_date": "2009-03-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "490625"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xpdf: Freeing of potentially uninitialized memory in JBIG2 decoder",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-0166"
        },
        {
          "category": "external",
          "summary": "RHBZ#490625",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490625"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-0166",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-0166"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0166",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0166"
        }
      ],
      "release_date": "2009-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-04-30T20:55:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0458"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "xpdf: Freeing of potentially uninitialized memory in JBIG2 decoder"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Drew Yao",
            "Braden Thomas"
          ],
          "organization": "Apple Product Security"
        }
      ],
      "cve": "CVE-2009-0195",
      "discovery_date": "2009-03-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "490612"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-0195"
        },
        {
          "category": "external",
          "summary": "RHBZ#490612",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490612"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-0195",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-0195"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0195",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0195"
        }
      ],
      "release_date": "2009-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-04-30T20:55:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0458"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Will Dormann"
          ],
          "organization": "CERT/CC"
        }
      ],
      "cve": "CVE-2009-0799",
      "discovery_date": "2009-03-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "495886"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "PDF JBIG2 decoder OOB read",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-0799"
        },
        {
          "category": "external",
          "summary": "RHBZ#495886",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495886"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-0799",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-0799"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0799",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0799"
        }
      ],
      "release_date": "2009-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-04-30T20:55:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0458"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "PDF JBIG2 decoder OOB read"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Will Dormann"
          ],
          "organization": "CERT/CC"
        }
      ],
      "cve": "CVE-2009-0800",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2009-03-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "495887"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple \"input validation flaws\" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "PDF JBIG2 multiple input validation flaws",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-0800"
        },
        {
          "category": "external",
          "summary": "RHBZ#495887",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495887"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-0800",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-0800"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0800",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0800"
        }
      ],
      "release_date": "2009-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-04-30T20:55:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0458"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "PDF JBIG2 multiple input validation flaws"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Will Dormann"
          ],
          "organization": "CERT/CC"
        }
      ],
      "cve": "CVE-2009-1179",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2009-03-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "495889"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "PDF JBIG2 integer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1179"
        },
        {
          "category": "external",
          "summary": "RHBZ#495889",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495889"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1179",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1179"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1179",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1179"
        }
      ],
      "release_date": "2009-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-04-30T20:55:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0458"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "PDF JBIG2 integer overflow"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Will Dormann"
          ],
          "organization": "CERT/CC"
        }
      ],
      "cve": "CVE-2009-1180",
      "discovery_date": "2009-03-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "495892"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "PDF JBIG2 invalid free()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1180"
        },
        {
          "category": "external",
          "summary": "RHBZ#495892",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495892"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1180",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1180"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1180",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1180"
        }
      ],
      "release_date": "2009-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-04-30T20:55:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0458"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "PDF JBIG2 invalid free()"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Will Dormann"
          ],
          "organization": "CERT/CC"
        }
      ],
      "cve": "CVE-2009-1181",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2009-03-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "495894"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "PDF JBIG2 NULL dereference",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1181"
        },
        {
          "category": "external",
          "summary": "RHBZ#495894",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495894"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1181",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1181"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1181",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1181"
        }
      ],
      "release_date": "2009-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-04-30T20:55:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0458"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "PDF JBIG2 NULL dereference"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Will Dormann"
          ],
          "organization": "CERT/CC"
        }
      ],
      "cve": "CVE-2009-1182",
      "discovery_date": "2009-03-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "495896"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "PDF JBIG2 MMR decoder buffer overflows",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1182"
        },
        {
          "category": "external",
          "summary": "RHBZ#495896",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495896"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1182",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1182"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1182",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1182"
        }
      ],
      "release_date": "2009-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-04-30T20:55:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0458"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "PDF JBIG2 MMR decoder buffer overflows"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Will Dormann"
          ],
          "organization": "CERT/CC"
        }
      ],
      "cve": "CVE-2009-1183",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2009-03-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "495899"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "PDF JBIG2 MMR infinite loop DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1183"
        },
        {
          "category": "external",
          "summary": "RHBZ#495899",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495899"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1183",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1183"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1183",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1183"
        }
      ],
      "release_date": "2009-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-04-30T20:55:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0458"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "PDF JBIG2 MMR infinite loop DoS"
    },
    {
      "cve": "CVE-2009-3606",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2009-06-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "526877"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xpdf/poppler: PSOutputDev:: doImageL1Sep integer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3606"
        },
        {
          "category": "external",
          "summary": "RHBZ#526877",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=526877"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3606",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3606"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3606",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3606"
        }
      ],
      "release_date": "2009-10-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-04-30T20:55:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0458"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 3.7,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_7.4.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_7.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "xpdf/poppler: PSOutputDev:: doImageL1Sep integer overflow"
    }
  ]
}

cve-2009-0195

Vulnerability from cvelistv5

Published

2009-04-23 17:00

Modified

2024-08-07 04:24

Severity ?

Summary

Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.

References

▼	URL	Tags
	http://secunia.com/secunia_research/2009-18/	x_refsource_MISC
	http://secunia.com/advisories/34963	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35064	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34481	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/502759/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.redhat.com/support/errata/RHSA-2009-0480.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1040	vdb-entry, x_refsource_VUPEN
	http://rhn.redhat.com/errata/RHSA-2009-0458.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076	vdb-entry, signature, x_refsource_OVAL
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:087	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/34756	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34291	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/502762/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/secunia_research/2009-17/	x_refsource_MISC
	http://www.securityfocus.com/bid/34791	vdb-entry, x_refsource_BID

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:24:18.218Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://secunia.com/secunia_research/2009-18/"
          },
          {
            "name": "34963",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34963"
          },
          {
            "name": "35064",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35064"
          },
          {
            "name": "34481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34481"
          },
          {
            "name": "20090417 Secunia Research: CUPS pdftops JBIG2 Symbol Dictionary Buffer Overflow",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/502759/100/0/threaded"
          },
          {
            "name": "RHSA-2009:0480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
          },
          {
            "name": "ADV-2010-1040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1040"
          },
          {
            "name": "RHSA-2009:0458",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10076",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076"
          },
          {
            "name": "MDVSA-2010:087",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
          },
          {
            "name": "34756",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34756"
          },
          {
            "name": "34291",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34291"
          },
          {
            "name": "20090417 Secunia Research: Xpdf JBIG2 Symbol Dictionary Buffer Overflow Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/502762/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://secunia.com/secunia_research/2009-17/"
          },
          {
            "name": "34791",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34791"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-04-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
        "shortName": "flexera"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://secunia.com/secunia_research/2009-18/"
        },
        {
          "name": "34963",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34963"
        },
        {
          "name": "35064",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35064"
        },
        {
          "name": "34481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34481"
        },
        {
          "name": "20090417 Secunia Research: CUPS pdftops JBIG2 Symbol Dictionary Buffer Overflow",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/502759/100/0/threaded"
        },
        {
          "name": "RHSA-2009:0480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
        },
        {
          "name": "ADV-2010-1040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1040"
        },
        {
          "name": "RHSA-2009:0458",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10076",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076"
        },
        {
          "name": "MDVSA-2010:087",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
        },
        {
          "name": "34756",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34756"
        },
        {
          "name": "34291",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34291"
        },
        {
          "name": "20090417 Secunia Research: Xpdf JBIG2 Symbol Dictionary Buffer Overflow Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/502762/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://secunia.com/secunia_research/2009-17/"
        },
        {
          "name": "34791",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34791"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "PSIRT-CNA@flexerasoftware.com",
          "ID": "CVE-2009-0195",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://secunia.com/secunia_research/2009-18/",
              "refsource": "MISC",
              "url": "http://secunia.com/secunia_research/2009-18/"
            },
            {
              "name": "34963",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34963"
            },
            {
              "name": "35064",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35064"
            },
            {
              "name": "34481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34481"
            },
            {
              "name": "20090417 Secunia Research: CUPS pdftops JBIG2 Symbol Dictionary Buffer Overflow",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/502759/100/0/threaded"
            },
            {
              "name": "RHSA-2009:0480",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
            },
            {
              "name": "ADV-2010-1040",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1040"
            },
            {
              "name": "RHSA-2009:0458",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
            },
            {
              "name": "oval:org.mitre.oval:def:10076",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076"
            },
            {
              "name": "MDVSA-2010:087",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
            },
            {
              "name": "34756",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34756"
            },
            {
              "name": "34291",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34291"
            },
            {
              "name": "20090417 Secunia Research: Xpdf JBIG2 Symbol Dictionary Buffer Overflow Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/502762/100/0/threaded"
            },
            {
              "name": "http://secunia.com/secunia_research/2009-17/",
              "refsource": "MISC",
              "url": "http://secunia.com/secunia_research/2009-17/"
            },
            {
              "name": "34791",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/34791"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
    "assignerShortName": "flexera",
    "cveId": "CVE-2009-0195",
    "datePublished": "2009-04-23T17:00:00",
    "dateReserved": "2009-01-20T00:00:00",
    "dateUpdated": "2024-08-07T04:24:18.218Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-1183

Vulnerability from cvelistv5

Published

2009-04-23 17:00

Modified

2024-08-07 05:04

Severity ?

Summary

The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file.

References

▼	URL	Tags
	http://www.debian.org/security/2009/dsa-1793	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/34963	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2009/dsa-1790	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/35037	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1077	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/35064	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1066	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/34481	third-party-advisory, x_refsource_SECUNIA
	http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477	vendor-advisory, x_refsource_SLACKWARE
	http://www.securitytracker.com/id?1022072	vdb-entry, x_refsource_SECTRACK
	http://www.redhat.com/support/errata/RHSA-2009-0431.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/1065	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2009-0430.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.redhat.com/show_bug.cgi?id=495899	x_refsource_CONFIRM
	http://secunia.com/advisories/35618	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0480.html	vendor-advisory, x_refsource_REDHAT
	http://poppler.freedesktop.org/releases.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/34568	vdb-entry, x_refsource_BID
	http://www.mandriva.com/security/advisories?name=MDVSA-2011:175	vendor-advisory, x_refsource_MANDRIVA
	http://www.kb.cert.org/vuls/id/196617	third-party-advisory, x_refsource_CERT-VN
	http://www.vupen.com/english/advisories/2010/1040	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2009-0458.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10769	vdb-entry, signature, x_refsource_OVAL
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34991	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:101	vendor-advisory, x_refsource_MANDRIVA
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:087	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/35685	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1076	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/34756	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34291	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34755	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34852	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34959	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34746	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0429.html	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:04:49.221Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1793",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1793"
          },
          {
            "name": "34963",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34963"
          },
          {
            "name": "DSA-1790",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1790"
          },
          {
            "name": "35037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35037"
          },
          {
            "name": "ADV-2009-1077",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1077"
          },
          {
            "name": "35064",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35064"
          },
          {
            "name": "ADV-2009-1066",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1066"
          },
          {
            "name": "34481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34481"
          },
          {
            "name": "SSA:2009-129-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
          },
          {
            "name": "1022072",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022072"
          },
          {
            "name": "RHSA-2009:0431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
          },
          {
            "name": "ADV-2009-1065",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1065"
          },
          {
            "name": "RHSA-2009:0430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
          },
          {
            "name": "FEDORA-2009-6972",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495899"
          },
          {
            "name": "35618",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35618"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "RHSA-2009:0480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://poppler.freedesktop.org/releases.html"
          },
          {
            "name": "34568",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34568"
          },
          {
            "name": "MDVSA-2011:175",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
          },
          {
            "name": "VU#196617",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/196617"
          },
          {
            "name": "ADV-2010-1040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1040"
          },
          {
            "name": "SUSE-SA:2009:024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
          },
          {
            "name": "RHSA-2009:0458",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10769",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10769"
          },
          {
            "name": "FEDORA-2009-6982",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
          },
          {
            "name": "34991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34991"
          },
          {
            "name": "MDVSA-2009:101",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
          },
          {
            "name": "MDVSA-2010:087",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "35685",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35685"
          },
          {
            "name": "ADV-2009-1076",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1076"
          },
          {
            "name": "34756",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34756"
          },
          {
            "name": "34291",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34291"
          },
          {
            "name": "34755",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34755"
          },
          {
            "name": "34852",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34852"
          },
          {
            "name": "SUSE-SR:2009:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
          },
          {
            "name": "FEDORA-2009-6973",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
          },
          {
            "name": "34959",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34959"
          },
          {
            "name": "34746",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34746"
          },
          {
            "name": "RHSA-2009:0429",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-1793",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1793"
        },
        {
          "name": "34963",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34963"
        },
        {
          "name": "DSA-1790",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1790"
        },
        {
          "name": "35037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35037"
        },
        {
          "name": "ADV-2009-1077",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1077"
        },
        {
          "name": "35064",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35064"
        },
        {
          "name": "ADV-2009-1066",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1066"
        },
        {
          "name": "34481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34481"
        },
        {
          "name": "SSA:2009-129-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
        },
        {
          "name": "1022072",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022072"
        },
        {
          "name": "RHSA-2009:0431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
        },
        {
          "name": "ADV-2009-1065",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1065"
        },
        {
          "name": "RHSA-2009:0430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
        },
        {
          "name": "FEDORA-2009-6972",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495899"
        },
        {
          "name": "35618",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35618"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "RHSA-2009:0480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://poppler.freedesktop.org/releases.html"
        },
        {
          "name": "34568",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34568"
        },
        {
          "name": "MDVSA-2011:175",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
        },
        {
          "name": "VU#196617",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/196617"
        },
        {
          "name": "ADV-2010-1040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1040"
        },
        {
          "name": "SUSE-SA:2009:024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
        },
        {
          "name": "RHSA-2009:0458",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10769",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10769"
        },
        {
          "name": "FEDORA-2009-6982",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
        },
        {
          "name": "34991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34991"
        },
        {
          "name": "MDVSA-2009:101",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
        },
        {
          "name": "MDVSA-2010:087",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "35685",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35685"
        },
        {
          "name": "ADV-2009-1076",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1076"
        },
        {
          "name": "34756",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34756"
        },
        {
          "name": "34291",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34291"
        },
        {
          "name": "34755",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34755"
        },
        {
          "name": "34852",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34852"
        },
        {
          "name": "SUSE-SR:2009:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
        },
        {
          "name": "FEDORA-2009-6973",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
        },
        {
          "name": "34959",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34959"
        },
        {
          "name": "34746",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34746"
        },
        {
          "name": "RHSA-2009:0429",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-1183",
    "datePublished": "2009-04-23T17:00:00",
    "dateReserved": "2009-03-31T00:00:00",
    "dateUpdated": "2024-08-07T05:04:49.221Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-0147

Vulnerability from cvelistv5

Published

2009-04-23 17:00

Modified

2024-08-07 04:24

Severity ?

Summary

Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.

References

▼	URL	Tags
	http://www.debian.org/security/2009/dsa-1793	vendor-advisory, x_refsource_DEBIAN
	http://security.gentoo.org/glsa/glsa-200904-20.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/34963	third-party-advisory, x_refsource_SECUNIA
	http://support.apple.com/kb/HT3639	x_refsource_CONFIRM
	http://www.debian.org/security/2009/dsa-1790	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/35037	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1077	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2009/1621	vdb-entry, x_refsource_VUPEN
	http://support.apple.com/kb/HT3549	x_refsource_CONFIRM
	http://secunia.com/advisories/35064	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1066	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/34481	third-party-advisory, x_refsource_SECUNIA
	http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477	vendor-advisory, x_refsource_SLACKWARE
	http://www.redhat.com/support/errata/RHSA-2009-0431.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/1065	vdb-entry, x_refsource_VUPEN
	http://wiki.rpath.com/Advisories:rPSA-2009-0061	x_refsource_CONFIRM
	http://bugs.gentoo.org/show_bug.cgi?id=263028	x_refsource_CONFIRM
	http://secunia.com/advisories/35074	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0430.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/35618	third-party-advisory, x_refsource_SECUNIA
	http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html	vendor-advisory, x_refsource_APPLE
	http://lists.apple.com/archives/security-announce/2009/May/msg00002.html	vendor-advisory, x_refsource_APPLE
	http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0480.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/34568	vdb-entry, x_refsource_BID
	http://www.securityfocus.com/archive/1/502750/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.vupen.com/english/advisories/2010/1040	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2009-0458.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34991	third-party-advisory, x_refsource_SECUNIA
	http://wiki.rpath.com/Advisories:rPSA-2009-0059	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:101	vendor-advisory, x_refsource_MANDRIVA
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:087	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://www.us-cert.gov/cas/techalerts/TA09-133A.html	third-party-advisory, x_refsource_CERT
	http://secunia.com/advisories/35685	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34756	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34291	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34755	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1297	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/archive/1/502761/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/34852	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.redhat.com/show_bug.cgi?id=490614	x_refsource_CONFIRM
	http://secunia.com/advisories/34959	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9941	vdb-entry, signature, x_refsource_OVAL
	http://www.redhat.com/support/errata/RHSA-2009-0429.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id?1022073	vdb-entry, x_refsource_SECTRACK

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:24:18.354Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1793",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1793"
          },
          {
            "name": "GLSA-200904-20",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200904-20.xml"
          },
          {
            "name": "34963",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34963"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3639"
          },
          {
            "name": "DSA-1790",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1790"
          },
          {
            "name": "35037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35037"
          },
          {
            "name": "ADV-2009-1077",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1077"
          },
          {
            "name": "ADV-2009-1621",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1621"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3549"
          },
          {
            "name": "35064",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35064"
          },
          {
            "name": "ADV-2009-1066",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1066"
          },
          {
            "name": "34481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34481"
          },
          {
            "name": "SSA:2009-129-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
          },
          {
            "name": "RHSA-2009:0431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
          },
          {
            "name": "ADV-2009-1065",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1065"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0061"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=263028"
          },
          {
            "name": "35074",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35074"
          },
          {
            "name": "RHSA-2009:0430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
          },
          {
            "name": "FEDORA-2009-6972",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
          },
          {
            "name": "35618",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35618"
          },
          {
            "name": "APPLE-SA-2009-06-17-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html"
          },
          {
            "name": "APPLE-SA-2009-05-12",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "RHSA-2009:0480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
          },
          {
            "name": "34568",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34568"
          },
          {
            "name": "20090417 rPSA-2009-0061-1 cups",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/502750/100/0/threaded"
          },
          {
            "name": "ADV-2010-1040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1040"
          },
          {
            "name": "SUSE-SA:2009:024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
          },
          {
            "name": "RHSA-2009:0458",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
          },
          {
            "name": "FEDORA-2009-6982",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
          },
          {
            "name": "34991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34991"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0059"
          },
          {
            "name": "MDVSA-2009:101",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
          },
          {
            "name": "MDVSA-2010:087",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "TA09-133A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA09-133A.html"
          },
          {
            "name": "35685",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35685"
          },
          {
            "name": "34756",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34756"
          },
          {
            "name": "34291",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34291"
          },
          {
            "name": "34755",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34755"
          },
          {
            "name": "ADV-2009-1297",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1297"
          },
          {
            "name": "20090417 rPSA-2009-0059-1 poppler",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/502761/100/0/threaded"
          },
          {
            "name": "34852",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34852"
          },
          {
            "name": "SUSE-SR:2009:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
          },
          {
            "name": "FEDORA-2009-6973",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490614"
          },
          {
            "name": "34959",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34959"
          },
          {
            "name": "oval:org.mitre.oval:def:9941",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9941"
          },
          {
            "name": "RHSA-2009:0429",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
          },
          {
            "name": "1022073",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022073"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-1793",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1793"
        },
        {
          "name": "GLSA-200904-20",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200904-20.xml"
        },
        {
          "name": "34963",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34963"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3639"
        },
        {
          "name": "DSA-1790",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1790"
        },
        {
          "name": "35037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35037"
        },
        {
          "name": "ADV-2009-1077",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1077"
        },
        {
          "name": "ADV-2009-1621",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1621"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3549"
        },
        {
          "name": "35064",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35064"
        },
        {
          "name": "ADV-2009-1066",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1066"
        },
        {
          "name": "34481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34481"
        },
        {
          "name": "SSA:2009-129-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
        },
        {
          "name": "RHSA-2009:0431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
        },
        {
          "name": "ADV-2009-1065",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1065"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0061"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=263028"
        },
        {
          "name": "35074",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35074"
        },
        {
          "name": "RHSA-2009:0430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
        },
        {
          "name": "FEDORA-2009-6972",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
        },
        {
          "name": "35618",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35618"
        },
        {
          "name": "APPLE-SA-2009-06-17-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html"
        },
        {
          "name": "APPLE-SA-2009-05-12",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "RHSA-2009:0480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
        },
        {
          "name": "34568",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34568"
        },
        {
          "name": "20090417 rPSA-2009-0061-1 cups",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/502750/100/0/threaded"
        },
        {
          "name": "ADV-2010-1040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1040"
        },
        {
          "name": "SUSE-SA:2009:024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
        },
        {
          "name": "RHSA-2009:0458",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
        },
        {
          "name": "FEDORA-2009-6982",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
        },
        {
          "name": "34991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34991"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0059"
        },
        {
          "name": "MDVSA-2009:101",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
        },
        {
          "name": "MDVSA-2010:087",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "TA09-133A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA09-133A.html"
        },
        {
          "name": "35685",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35685"
        },
        {
          "name": "34756",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34756"
        },
        {
          "name": "34291",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34291"
        },
        {
          "name": "34755",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34755"
        },
        {
          "name": "ADV-2009-1297",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1297"
        },
        {
          "name": "20090417 rPSA-2009-0059-1 poppler",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/502761/100/0/threaded"
        },
        {
          "name": "34852",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34852"
        },
        {
          "name": "SUSE-SR:2009:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
        },
        {
          "name": "FEDORA-2009-6973",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490614"
        },
        {
          "name": "34959",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34959"
        },
        {
          "name": "oval:org.mitre.oval:def:9941",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9941"
        },
        {
          "name": "RHSA-2009:0429",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
        },
        {
          "name": "1022073",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022073"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-0147",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-1793",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2009/dsa-1793"
            },
            {
              "name": "GLSA-200904-20",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200904-20.xml"
            },
            {
              "name": "34963",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34963"
            },
            {
              "name": "http://support.apple.com/kb/HT3639",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3639"
            },
            {
              "name": "DSA-1790",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2009/dsa-1790"
            },
            {
              "name": "35037",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35037"
            },
            {
              "name": "ADV-2009-1077",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1077"
            },
            {
              "name": "ADV-2009-1621",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1621"
            },
            {
              "name": "http://support.apple.com/kb/HT3549",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3549"
            },
            {
              "name": "35064",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35064"
            },
            {
              "name": "ADV-2009-1066",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1066"
            },
            {
              "name": "34481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34481"
            },
            {
              "name": "SSA:2009-129-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
            },
            {
              "name": "RHSA-2009:0431",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
            },
            {
              "name": "ADV-2009-1065",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1065"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2009-0061",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0061"
            },
            {
              "name": "http://bugs.gentoo.org/show_bug.cgi?id=263028",
              "refsource": "CONFIRM",
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=263028"
            },
            {
              "name": "35074",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35074"
            },
            {
              "name": "RHSA-2009:0430",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
            },
            {
              "name": "FEDORA-2009-6972",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
            },
            {
              "name": "35618",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35618"
            },
            {
              "name": "APPLE-SA-2009-06-17-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html"
            },
            {
              "name": "APPLE-SA-2009-05-12",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "RHSA-2009:0480",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
            },
            {
              "name": "34568",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/34568"
            },
            {
              "name": "20090417 rPSA-2009-0061-1 cups",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/502750/100/0/threaded"
            },
            {
              "name": "ADV-2010-1040",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1040"
            },
            {
              "name": "SUSE-SA:2009:024",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
            },
            {
              "name": "RHSA-2009:0458",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
            },
            {
              "name": "FEDORA-2009-6982",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
            },
            {
              "name": "34991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34991"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2009-0059",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0059"
            },
            {
              "name": "MDVSA-2009:101",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
            },
            {
              "name": "MDVSA-2010:087",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "TA09-133A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA09-133A.html"
            },
            {
              "name": "35685",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35685"
            },
            {
              "name": "34756",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34756"
            },
            {
              "name": "34291",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34291"
            },
            {
              "name": "34755",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34755"
            },
            {
              "name": "ADV-2009-1297",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1297"
            },
            {
              "name": "20090417 rPSA-2009-0059-1 poppler",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/502761/100/0/threaded"
            },
            {
              "name": "34852",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34852"
            },
            {
              "name": "SUSE-SR:2009:012",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
            },
            {
              "name": "FEDORA-2009-6973",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=490614",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490614"
            },
            {
              "name": "34959",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34959"
            },
            {
              "name": "oval:org.mitre.oval:def:9941",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9941"
            },
            {
              "name": "RHSA-2009:0429",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
            },
            {
              "name": "1022073",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1022073"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-0147",
    "datePublished": "2009-04-23T17:00:00",
    "dateReserved": "2009-01-16T00:00:00",
    "dateUpdated": "2024-08-07T04:24:18.354Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3606

Vulnerability from cvelistv5

Published

2009-10-21 17:00

Modified

2024-08-07 06:31

Severity ?

Summary

Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.

References

▼	URL	Tags
	http://secunia.com/advisories/39938	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37042	third-party-advisory, x_refsource_SECUNIA
	ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch	x_refsource_CONFIRM
	http://www.debian.org/security/2009/dsa-1941	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:287	vendor-advisory, x_refsource_MANDRIVA
	http://www.openwall.com/lists/oss-security/2009/12/01/6	mailing-list, x_refsource_MLIST
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html	vendor-advisory, x_refsource_FEDORA
	https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html	vendor-advisory, x_refsource_FEDORA
	http://cgit.freedesktop.org/poppler/poppler/diff/poppler/PSOutputDev.cc?id=7b2d314a61	x_refsource_CONFIRM
	https://rhn.redhat.com/errata/RHSA-2009-1501.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2010/dsa-2028	vendor-advisory, x_refsource_DEBIAN
	http://www.debian.org/security/2010/dsa-2050	vendor-advisory, x_refsource_DEBIAN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11289	vdb-entry, signature, x_refsource_OVAL
	http://www.openwall.com/lists/oss-security/2009/12/01/1	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/37159	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html	vendor-advisory, x_refsource_FEDORA
	http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1	vendor-advisory, x_refsource_SUNALERT
	https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html	vendor-advisory, x_refsource_FEDORA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7836	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/37077	third-party-advisory, x_refsource_SECUNIA
	http://securitytracker.com/id?1023029	vdb-entry, x_refsource_SECTRACK
	https://exchange.xforce.ibmcloud.com/vulnerabilities/53798	vdb-entry, x_refsource_XF
	http://www.mandriva.com/security/advisories?name=MDVSA-2011:175	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/37037	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/1040	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0802	vdb-entry, x_refsource_VUPEN
	https://rhn.redhat.com/errata/RHSA-2009-1502.html	vendor-advisory, x_refsource_REDHAT
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html	vendor-advisory, x_refsource_FEDORA
	https://rhn.redhat.com/errata/RHSA-2009-1500.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/2928	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/37023	third-party-advisory, x_refsource_SECUNIA
	http://www.openwall.com/lists/oss-security/2009/12/01/5	mailing-list, x_refsource_MLIST
	http://www.vupen.com/english/advisories/2009/2924	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:087	vendor-advisory, x_refsource_MANDRIVA
	http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1	vendor-advisory, x_refsource_SUNALERT
	http://www.vupen.com/english/advisories/2010/1220	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/37053	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/39327	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37043	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/36703	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=526877	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:31:11.027Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "39938",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39938"
          },
          {
            "name": "37042",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37042"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch"
          },
          {
            "name": "DSA-1941",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1941"
          },
          {
            "name": "MDVSA-2009:287",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:287"
          },
          {
            "name": "[oss-security] 20091201 Re: Need more information on recent poppler issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2009/12/01/6"
          },
          {
            "name": "FEDORA-2010-1377",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html"
          },
          {
            "name": "FEDORA-2009-10823",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cgit.freedesktop.org/poppler/poppler/diff/poppler/PSOutputDev.cc?id=7b2d314a61"
          },
          {
            "name": "RHSA-2009:1501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1501.html"
          },
          {
            "name": "SUSE-SR:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html"
          },
          {
            "name": "DSA-2028",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2028"
          },
          {
            "name": "DSA-2050",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2050"
          },
          {
            "name": "oval:org.mitre.oval:def:11289",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11289"
          },
          {
            "name": "[oss-security] 20091130 Need more information on recent poppler issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2009/12/01/1"
          },
          {
            "name": "37159",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37159"
          },
          {
            "name": "FEDORA-2010-1805",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html"
          },
          {
            "name": "1021706",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1"
          },
          {
            "name": "FEDORA-2009-10845",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html"
          },
          {
            "name": "oval:org.mitre.oval:def:7836",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7836"
          },
          {
            "name": "37077",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37077"
          },
          {
            "name": "1023029",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1023029"
          },
          {
            "name": "xpdf-psoutputdev-bo(53798)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53798"
          },
          {
            "name": "MDVSA-2011:175",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
          },
          {
            "name": "37037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37037"
          },
          {
            "name": "ADV-2010-1040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1040"
          },
          {
            "name": "ADV-2010-0802",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0802"
          },
          {
            "name": "RHSA-2009:1502",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1502.html"
          },
          {
            "name": "FEDORA-2010-1842",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html"
          },
          {
            "name": "RHSA-2009:1500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1500.html"
          },
          {
            "name": "ADV-2009-2928",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2928"
          },
          {
            "name": "37023",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37023"
          },
          {
            "name": "[oss-security] 20091130 Re: Need more information on recent poppler issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2009/12/01/5"
          },
          {
            "name": "ADV-2009-2924",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2924"
          },
          {
            "name": "MDVSA-2010:087",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
          },
          {
            "name": "274030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1"
          },
          {
            "name": "ADV-2010-1220",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1220"
          },
          {
            "name": "37053",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37053"
          },
          {
            "name": "39327",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39327"
          },
          {
            "name": "37043",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37043"
          },
          {
            "name": "36703",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/36703"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=526877"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-10-15T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "39938",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39938"
        },
        {
          "name": "37042",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37042"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch"
        },
        {
          "name": "DSA-1941",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1941"
        },
        {
          "name": "MDVSA-2009:287",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:287"
        },
        {
          "name": "[oss-security] 20091201 Re: Need more information on recent poppler issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2009/12/01/6"
        },
        {
          "name": "FEDORA-2010-1377",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html"
        },
        {
          "name": "FEDORA-2009-10823",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cgit.freedesktop.org/poppler/poppler/diff/poppler/PSOutputDev.cc?id=7b2d314a61"
        },
        {
          "name": "RHSA-2009:1501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1501.html"
        },
        {
          "name": "SUSE-SR:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html"
        },
        {
          "name": "DSA-2028",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2028"
        },
        {
          "name": "DSA-2050",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2050"
        },
        {
          "name": "oval:org.mitre.oval:def:11289",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11289"
        },
        {
          "name": "[oss-security] 20091130 Need more information on recent poppler issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2009/12/01/1"
        },
        {
          "name": "37159",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37159"
        },
        {
          "name": "FEDORA-2010-1805",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html"
        },
        {
          "name": "1021706",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1"
        },
        {
          "name": "FEDORA-2009-10845",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html"
        },
        {
          "name": "oval:org.mitre.oval:def:7836",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7836"
        },
        {
          "name": "37077",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37077"
        },
        {
          "name": "1023029",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1023029"
        },
        {
          "name": "xpdf-psoutputdev-bo(53798)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53798"
        },
        {
          "name": "MDVSA-2011:175",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
        },
        {
          "name": "37037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37037"
        },
        {
          "name": "ADV-2010-1040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1040"
        },
        {
          "name": "ADV-2010-0802",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0802"
        },
        {
          "name": "RHSA-2009:1502",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1502.html"
        },
        {
          "name": "FEDORA-2010-1842",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html"
        },
        {
          "name": "RHSA-2009:1500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1500.html"
        },
        {
          "name": "ADV-2009-2928",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2928"
        },
        {
          "name": "37023",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37023"
        },
        {
          "name": "[oss-security] 20091130 Re: Need more information on recent poppler issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2009/12/01/5"
        },
        {
          "name": "ADV-2009-2924",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2924"
        },
        {
          "name": "MDVSA-2010:087",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
        },
        {
          "name": "274030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1"
        },
        {
          "name": "ADV-2010-1220",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1220"
        },
        {
          "name": "37053",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37053"
        },
        {
          "name": "39327",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39327"
        },
        {
          "name": "37043",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37043"
        },
        {
          "name": "36703",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/36703"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=526877"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-3606",
    "datePublished": "2009-10-21T17:00:00",
    "dateReserved": "2009-10-09T00:00:00",
    "dateUpdated": "2024-08-07T06:31:11.027Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-0799

Vulnerability from cvelistv5

Published

2009-04-23 17:00

Modified

2024-08-07 04:48

Severity ?

Summary

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read.

References

▼	URL	Tags
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10204	vdb-entry, signature, x_refsource_OVAL
	http://www.debian.org/security/2009/dsa-1793	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/34963	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2009/dsa-1790	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/35037	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1077	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/35064	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1066	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/34481	third-party-advisory, x_refsource_SECUNIA
	http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477	vendor-advisory, x_refsource_SLACKWARE
	http://www.securitytracker.com/id?1022072	vdb-entry, x_refsource_SECTRACK
	http://www.redhat.com/support/errata/RHSA-2009-0431.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/1065	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2009-0430.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/35618	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0480.html	vendor-advisory, x_refsource_REDHAT
	http://poppler.freedesktop.org/releases.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/34568	vdb-entry, x_refsource_BID
	http://www.mandriva.com/security/advisories?name=MDVSA-2011:175	vendor-advisory, x_refsource_MANDRIVA
	http://www.kb.cert.org/vuls/id/196617	third-party-advisory, x_refsource_CERT-VN
	http://www.vupen.com/english/advisories/2010/1040	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2009-0458.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34991	third-party-advisory, x_refsource_SECUNIA
	http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=495886	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:101	vendor-advisory, x_refsource_MANDRIVA
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:087	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/35685	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1076	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/34756	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34291	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34755	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34852	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34959	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34746	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0429.html	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:48:52.381Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:10204",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10204"
          },
          {
            "name": "DSA-1793",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1793"
          },
          {
            "name": "34963",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34963"
          },
          {
            "name": "DSA-1790",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1790"
          },
          {
            "name": "35037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35037"
          },
          {
            "name": "ADV-2009-1077",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1077"
          },
          {
            "name": "35064",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35064"
          },
          {
            "name": "ADV-2009-1066",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1066"
          },
          {
            "name": "34481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34481"
          },
          {
            "name": "SSA:2009-129-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
          },
          {
            "name": "1022072",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022072"
          },
          {
            "name": "RHSA-2009:0431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
          },
          {
            "name": "ADV-2009-1065",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1065"
          },
          {
            "name": "RHSA-2009:0430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
          },
          {
            "name": "FEDORA-2009-6972",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
          },
          {
            "name": "35618",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35618"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "RHSA-2009:0480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://poppler.freedesktop.org/releases.html"
          },
          {
            "name": "34568",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34568"
          },
          {
            "name": "MDVSA-2011:175",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
          },
          {
            "name": "VU#196617",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/196617"
          },
          {
            "name": "ADV-2010-1040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1040"
          },
          {
            "name": "SUSE-SA:2009:024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
          },
          {
            "name": "RHSA-2009:0458",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
          },
          {
            "name": "FEDORA-2009-6982",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
          },
          {
            "name": "34991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34991"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=495886"
          },
          {
            "name": "MDVSA-2009:101",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
          },
          {
            "name": "MDVSA-2010:087",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "35685",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35685"
          },
          {
            "name": "ADV-2009-1076",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1076"
          },
          {
            "name": "34756",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34756"
          },
          {
            "name": "34291",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34291"
          },
          {
            "name": "34755",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34755"
          },
          {
            "name": "34852",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34852"
          },
          {
            "name": "SUSE-SR:2009:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
          },
          {
            "name": "FEDORA-2009-6973",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
          },
          {
            "name": "34959",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34959"
          },
          {
            "name": "34746",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34746"
          },
          {
            "name": "RHSA-2009:0429",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:10204",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10204"
        },
        {
          "name": "DSA-1793",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1793"
        },
        {
          "name": "34963",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34963"
        },
        {
          "name": "DSA-1790",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1790"
        },
        {
          "name": "35037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35037"
        },
        {
          "name": "ADV-2009-1077",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1077"
        },
        {
          "name": "35064",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35064"
        },
        {
          "name": "ADV-2009-1066",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1066"
        },
        {
          "name": "34481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34481"
        },
        {
          "name": "SSA:2009-129-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
        },
        {
          "name": "1022072",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022072"
        },
        {
          "name": "RHSA-2009:0431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
        },
        {
          "name": "ADV-2009-1065",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1065"
        },
        {
          "name": "RHSA-2009:0430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
        },
        {
          "name": "FEDORA-2009-6972",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
        },
        {
          "name": "35618",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35618"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "RHSA-2009:0480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://poppler.freedesktop.org/releases.html"
        },
        {
          "name": "34568",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34568"
        },
        {
          "name": "MDVSA-2011:175",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
        },
        {
          "name": "VU#196617",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/196617"
        },
        {
          "name": "ADV-2010-1040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1040"
        },
        {
          "name": "SUSE-SA:2009:024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
        },
        {
          "name": "RHSA-2009:0458",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
        },
        {
          "name": "FEDORA-2009-6982",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
        },
        {
          "name": "34991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34991"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=495886"
        },
        {
          "name": "MDVSA-2009:101",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
        },
        {
          "name": "MDVSA-2010:087",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "35685",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35685"
        },
        {
          "name": "ADV-2009-1076",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1076"
        },
        {
          "name": "34756",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34756"
        },
        {
          "name": "34291",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34291"
        },
        {
          "name": "34755",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34755"
        },
        {
          "name": "34852",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34852"
        },
        {
          "name": "SUSE-SR:2009:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
        },
        {
          "name": "FEDORA-2009-6973",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
        },
        {
          "name": "34959",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34959"
        },
        {
          "name": "34746",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34746"
        },
        {
          "name": "RHSA-2009:0429",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-0799",
    "datePublished": "2009-04-23T17:00:00",
    "dateReserved": "2009-03-04T00:00:00",
    "dateUpdated": "2024-08-07T04:48:52.381Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-0146

Vulnerability from cvelistv5

Published

2009-04-23 17:00

Modified

2024-08-07 04:24

Severity ?

Summary

Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) JBIG2Stream::readSymbolDictSeg.

References

▼	URL	Tags
	http://www.debian.org/security/2009/dsa-1793	vendor-advisory, x_refsource_DEBIAN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9632	vdb-entry, signature, x_refsource_OVAL
	http://security.gentoo.org/glsa/glsa-200904-20.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/34963	third-party-advisory, x_refsource_SECUNIA
	http://support.apple.com/kb/HT3639	x_refsource_CONFIRM
	http://www.debian.org/security/2009/dsa-1790	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/35037	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1077	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2009/1621	vdb-entry, x_refsource_VUPEN
	http://support.apple.com/kb/HT3549	x_refsource_CONFIRM
	http://secunia.com/advisories/35064	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1066	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/34481	third-party-advisory, x_refsource_SECUNIA
	http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477	vendor-advisory, x_refsource_SLACKWARE
	http://www.redhat.com/support/errata/RHSA-2009-0431.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/1065	vdb-entry, x_refsource_VUPEN
	http://wiki.rpath.com/Advisories:rPSA-2009-0061	x_refsource_CONFIRM
	http://bugs.gentoo.org/show_bug.cgi?id=263028	x_refsource_CONFIRM
	http://secunia.com/advisories/35074	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0430.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/35618	third-party-advisory, x_refsource_SECUNIA
	http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html	vendor-advisory, x_refsource_APPLE
	http://lists.apple.com/archives/security-announce/2009/May/msg00002.html	vendor-advisory, x_refsource_APPLE
	https://bugzilla.redhat.com/show_bug.cgi?id=490612	x_refsource_CONFIRM
	http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0480.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/34568	vdb-entry, x_refsource_BID
	http://www.securityfocus.com/archive/1/502750/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.vupen.com/english/advisories/2010/1040	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2009-0458.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34991	third-party-advisory, x_refsource_SECUNIA
	http://wiki.rpath.com/Advisories:rPSA-2009-0059	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:101	vendor-advisory, x_refsource_MANDRIVA
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:087	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://www.us-cert.gov/cas/techalerts/TA09-133A.html	third-party-advisory, x_refsource_CERT
	http://secunia.com/advisories/35685	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34756	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34291	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34755	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1297	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/archive/1/502761/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/34852	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34959	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0429.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id?1022073	vdb-entry, x_refsource_SECTRACK

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:24:17.668Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1793",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1793"
          },
          {
            "name": "oval:org.mitre.oval:def:9632",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9632"
          },
          {
            "name": "GLSA-200904-20",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200904-20.xml"
          },
          {
            "name": "34963",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34963"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3639"
          },
          {
            "name": "DSA-1790",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1790"
          },
          {
            "name": "35037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35037"
          },
          {
            "name": "ADV-2009-1077",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1077"
          },
          {
            "name": "ADV-2009-1621",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1621"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3549"
          },
          {
            "name": "35064",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35064"
          },
          {
            "name": "ADV-2009-1066",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1066"
          },
          {
            "name": "34481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34481"
          },
          {
            "name": "SSA:2009-129-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
          },
          {
            "name": "RHSA-2009:0431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
          },
          {
            "name": "ADV-2009-1065",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1065"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0061"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=263028"
          },
          {
            "name": "35074",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35074"
          },
          {
            "name": "RHSA-2009:0430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
          },
          {
            "name": "FEDORA-2009-6972",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
          },
          {
            "name": "35618",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35618"
          },
          {
            "name": "APPLE-SA-2009-06-17-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html"
          },
          {
            "name": "APPLE-SA-2009-05-12",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490612"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "RHSA-2009:0480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
          },
          {
            "name": "34568",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34568"
          },
          {
            "name": "20090417 rPSA-2009-0061-1 cups",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/502750/100/0/threaded"
          },
          {
            "name": "ADV-2010-1040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1040"
          },
          {
            "name": "SUSE-SA:2009:024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
          },
          {
            "name": "RHSA-2009:0458",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
          },
          {
            "name": "FEDORA-2009-6982",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
          },
          {
            "name": "34991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34991"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0059"
          },
          {
            "name": "MDVSA-2009:101",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
          },
          {
            "name": "MDVSA-2010:087",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "TA09-133A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA09-133A.html"
          },
          {
            "name": "35685",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35685"
          },
          {
            "name": "34756",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34756"
          },
          {
            "name": "34291",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34291"
          },
          {
            "name": "34755",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34755"
          },
          {
            "name": "ADV-2009-1297",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1297"
          },
          {
            "name": "20090417 rPSA-2009-0059-1 poppler",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/502761/100/0/threaded"
          },
          {
            "name": "34852",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34852"
          },
          {
            "name": "SUSE-SR:2009:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
          },
          {
            "name": "FEDORA-2009-6973",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
          },
          {
            "name": "34959",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34959"
          },
          {
            "name": "RHSA-2009:0429",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
          },
          {
            "name": "1022073",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022073"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) JBIG2Stream::readSymbolDictSeg."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-1793",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1793"
        },
        {
          "name": "oval:org.mitre.oval:def:9632",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9632"
        },
        {
          "name": "GLSA-200904-20",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200904-20.xml"
        },
        {
          "name": "34963",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34963"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3639"
        },
        {
          "name": "DSA-1790",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1790"
        },
        {
          "name": "35037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35037"
        },
        {
          "name": "ADV-2009-1077",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1077"
        },
        {
          "name": "ADV-2009-1621",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1621"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3549"
        },
        {
          "name": "35064",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35064"
        },
        {
          "name": "ADV-2009-1066",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1066"
        },
        {
          "name": "34481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34481"
        },
        {
          "name": "SSA:2009-129-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
        },
        {
          "name": "RHSA-2009:0431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
        },
        {
          "name": "ADV-2009-1065",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1065"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0061"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=263028"
        },
        {
          "name": "35074",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35074"
        },
        {
          "name": "RHSA-2009:0430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
        },
        {
          "name": "FEDORA-2009-6972",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
        },
        {
          "name": "35618",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35618"
        },
        {
          "name": "APPLE-SA-2009-06-17-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html"
        },
        {
          "name": "APPLE-SA-2009-05-12",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490612"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "RHSA-2009:0480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
        },
        {
          "name": "34568",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34568"
        },
        {
          "name": "20090417 rPSA-2009-0061-1 cups",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/502750/100/0/threaded"
        },
        {
          "name": "ADV-2010-1040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1040"
        },
        {
          "name": "SUSE-SA:2009:024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
        },
        {
          "name": "RHSA-2009:0458",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
        },
        {
          "name": "FEDORA-2009-6982",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
        },
        {
          "name": "34991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34991"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0059"
        },
        {
          "name": "MDVSA-2009:101",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
        },
        {
          "name": "MDVSA-2010:087",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "TA09-133A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA09-133A.html"
        },
        {
          "name": "35685",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35685"
        },
        {
          "name": "34756",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34756"
        },
        {
          "name": "34291",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34291"
        },
        {
          "name": "34755",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34755"
        },
        {
          "name": "ADV-2009-1297",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1297"
        },
        {
          "name": "20090417 rPSA-2009-0059-1 poppler",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/502761/100/0/threaded"
        },
        {
          "name": "34852",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34852"
        },
        {
          "name": "SUSE-SR:2009:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
        },
        {
          "name": "FEDORA-2009-6973",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
        },
        {
          "name": "34959",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34959"
        },
        {
          "name": "RHSA-2009:0429",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
        },
        {
          "name": "1022073",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022073"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-0146",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) JBIG2Stream::readSymbolDictSeg."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-1793",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2009/dsa-1793"
            },
            {
              "name": "oval:org.mitre.oval:def:9632",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9632"
            },
            {
              "name": "GLSA-200904-20",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200904-20.xml"
            },
            {
              "name": "34963",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34963"
            },
            {
              "name": "http://support.apple.com/kb/HT3639",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3639"
            },
            {
              "name": "DSA-1790",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2009/dsa-1790"
            },
            {
              "name": "35037",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35037"
            },
            {
              "name": "ADV-2009-1077",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1077"
            },
            {
              "name": "ADV-2009-1621",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1621"
            },
            {
              "name": "http://support.apple.com/kb/HT3549",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3549"
            },
            {
              "name": "35064",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35064"
            },
            {
              "name": "ADV-2009-1066",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1066"
            },
            {
              "name": "34481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34481"
            },
            {
              "name": "SSA:2009-129-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
            },
            {
              "name": "RHSA-2009:0431",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
            },
            {
              "name": "ADV-2009-1065",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1065"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2009-0061",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0061"
            },
            {
              "name": "http://bugs.gentoo.org/show_bug.cgi?id=263028",
              "refsource": "CONFIRM",
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=263028"
            },
            {
              "name": "35074",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35074"
            },
            {
              "name": "RHSA-2009:0430",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
            },
            {
              "name": "FEDORA-2009-6972",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
            },
            {
              "name": "35618",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35618"
            },
            {
              "name": "APPLE-SA-2009-06-17-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html"
            },
            {
              "name": "APPLE-SA-2009-05-12",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=490612",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490612"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "RHSA-2009:0480",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
            },
            {
              "name": "34568",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/34568"
            },
            {
              "name": "20090417 rPSA-2009-0061-1 cups",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/502750/100/0/threaded"
            },
            {
              "name": "ADV-2010-1040",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1040"
            },
            {
              "name": "SUSE-SA:2009:024",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
            },
            {
              "name": "RHSA-2009:0458",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
            },
            {
              "name": "FEDORA-2009-6982",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
            },
            {
              "name": "34991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34991"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2009-0059",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0059"
            },
            {
              "name": "MDVSA-2009:101",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
            },
            {
              "name": "MDVSA-2010:087",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "TA09-133A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA09-133A.html"
            },
            {
              "name": "35685",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35685"
            },
            {
              "name": "34756",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34756"
            },
            {
              "name": "34291",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34291"
            },
            {
              "name": "34755",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34755"
            },
            {
              "name": "ADV-2009-1297",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1297"
            },
            {
              "name": "20090417 rPSA-2009-0059-1 poppler",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/502761/100/0/threaded"
            },
            {
              "name": "34852",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34852"
            },
            {
              "name": "SUSE-SR:2009:012",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
            },
            {
              "name": "FEDORA-2009-6973",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
            },
            {
              "name": "34959",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34959"
            },
            {
              "name": "RHSA-2009:0429",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
            },
            {
              "name": "1022073",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1022073"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-0146",
    "datePublished": "2009-04-23T17:00:00",
    "dateReserved": "2009-01-16T00:00:00",
    "dateUpdated": "2024-08-07T04:24:17.668Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-1180

Vulnerability from cvelistv5

Published

2009-04-23 17:00

Modified

2024-08-07 05:04

Severity ?

Summary

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.

References

▼	URL	Tags
	http://www.debian.org/security/2009/dsa-1793	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/34963	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2009/dsa-1790	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/35037	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1077	vdb-entry, x_refsource_VUPEN
	https://bugzilla.redhat.com/show_bug.cgi?id=495892	x_refsource_CONFIRM
	http://secunia.com/advisories/35064	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1066	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/34481	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9926	vdb-entry, signature, x_refsource_OVAL
	http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477	vendor-advisory, x_refsource_SLACKWARE
	http://www.redhat.com/support/errata/RHSA-2009-0431.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/1065	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2009-0430.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/35618	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0480.html	vendor-advisory, x_refsource_REDHAT
	http://poppler.freedesktop.org/releases.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/34568	vdb-entry, x_refsource_BID
	http://www.mandriva.com/security/advisories?name=MDVSA-2011:175	vendor-advisory, x_refsource_MANDRIVA
	http://www.kb.cert.org/vuls/id/196617	third-party-advisory, x_refsource_CERT-VN
	http://www.vupen.com/english/advisories/2010/1040	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2009-0458.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34991	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:101	vendor-advisory, x_refsource_MANDRIVA
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:087	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/35685	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1076	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/34756	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34291	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34755	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34852	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34959	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34746	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0429.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id?1022073	vdb-entry, x_refsource_SECTRACK

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:04:49.251Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1793",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1793"
          },
          {
            "name": "34963",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34963"
          },
          {
            "name": "DSA-1790",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1790"
          },
          {
            "name": "35037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35037"
          },
          {
            "name": "ADV-2009-1077",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1077"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495892"
          },
          {
            "name": "35064",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35064"
          },
          {
            "name": "ADV-2009-1066",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1066"
          },
          {
            "name": "34481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34481"
          },
          {
            "name": "oval:org.mitre.oval:def:9926",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9926"
          },
          {
            "name": "SSA:2009-129-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
          },
          {
            "name": "RHSA-2009:0431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
          },
          {
            "name": "ADV-2009-1065",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1065"
          },
          {
            "name": "RHSA-2009:0430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
          },
          {
            "name": "FEDORA-2009-6972",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
          },
          {
            "name": "35618",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35618"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "RHSA-2009:0480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://poppler.freedesktop.org/releases.html"
          },
          {
            "name": "34568",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34568"
          },
          {
            "name": "MDVSA-2011:175",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
          },
          {
            "name": "VU#196617",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/196617"
          },
          {
            "name": "ADV-2010-1040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1040"
          },
          {
            "name": "SUSE-SA:2009:024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
          },
          {
            "name": "RHSA-2009:0458",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
          },
          {
            "name": "FEDORA-2009-6982",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
          },
          {
            "name": "34991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34991"
          },
          {
            "name": "MDVSA-2009:101",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
          },
          {
            "name": "MDVSA-2010:087",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "35685",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35685"
          },
          {
            "name": "ADV-2009-1076",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1076"
          },
          {
            "name": "34756",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34756"
          },
          {
            "name": "34291",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34291"
          },
          {
            "name": "34755",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34755"
          },
          {
            "name": "34852",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34852"
          },
          {
            "name": "SUSE-SR:2009:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
          },
          {
            "name": "FEDORA-2009-6973",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
          },
          {
            "name": "34959",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34959"
          },
          {
            "name": "34746",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34746"
          },
          {
            "name": "RHSA-2009:0429",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
          },
          {
            "name": "1022073",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022073"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-1793",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1793"
        },
        {
          "name": "34963",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34963"
        },
        {
          "name": "DSA-1790",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1790"
        },
        {
          "name": "35037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35037"
        },
        {
          "name": "ADV-2009-1077",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1077"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495892"
        },
        {
          "name": "35064",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35064"
        },
        {
          "name": "ADV-2009-1066",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1066"
        },
        {
          "name": "34481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34481"
        },
        {
          "name": "oval:org.mitre.oval:def:9926",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9926"
        },
        {
          "name": "SSA:2009-129-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
        },
        {
          "name": "RHSA-2009:0431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
        },
        {
          "name": "ADV-2009-1065",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1065"
        },
        {
          "name": "RHSA-2009:0430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
        },
        {
          "name": "FEDORA-2009-6972",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
        },
        {
          "name": "35618",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35618"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "RHSA-2009:0480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://poppler.freedesktop.org/releases.html"
        },
        {
          "name": "34568",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34568"
        },
        {
          "name": "MDVSA-2011:175",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
        },
        {
          "name": "VU#196617",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/196617"
        },
        {
          "name": "ADV-2010-1040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1040"
        },
        {
          "name": "SUSE-SA:2009:024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
        },
        {
          "name": "RHSA-2009:0458",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
        },
        {
          "name": "FEDORA-2009-6982",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
        },
        {
          "name": "34991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34991"
        },
        {
          "name": "MDVSA-2009:101",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
        },
        {
          "name": "MDVSA-2010:087",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "35685",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35685"
        },
        {
          "name": "ADV-2009-1076",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1076"
        },
        {
          "name": "34756",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34756"
        },
        {
          "name": "34291",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34291"
        },
        {
          "name": "34755",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34755"
        },
        {
          "name": "34852",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34852"
        },
        {
          "name": "SUSE-SR:2009:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
        },
        {
          "name": "FEDORA-2009-6973",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
        },
        {
          "name": "34959",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34959"
        },
        {
          "name": "34746",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34746"
        },
        {
          "name": "RHSA-2009:0429",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
        },
        {
          "name": "1022073",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022073"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-1180",
    "datePublished": "2009-04-23T17:00:00",
    "dateReserved": "2009-03-31T00:00:00",
    "dateUpdated": "2024-08-07T05:04:49.251Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-1182

Vulnerability from cvelistv5

Published

2009-04-23 17:00

Modified

2024-08-07 05:04

Severity ?

Summary

Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.

References

▼	URL	Tags
	http://www.debian.org/security/2009/dsa-1793	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/34963	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.redhat.com/show_bug.cgi?id=495896	x_refsource_CONFIRM
	http://www.debian.org/security/2009/dsa-1790	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/35037	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1077	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/35064	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1066	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/34481	third-party-advisory, x_refsource_SECUNIA
	http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477	vendor-advisory, x_refsource_SLACKWARE
	http://www.redhat.com/support/errata/RHSA-2009-0431.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/1065	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2009-0430.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/35618	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10735	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0480.html	vendor-advisory, x_refsource_REDHAT
	http://poppler.freedesktop.org/releases.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/34568	vdb-entry, x_refsource_BID
	http://www.mandriva.com/security/advisories?name=MDVSA-2011:175	vendor-advisory, x_refsource_MANDRIVA
	http://www.kb.cert.org/vuls/id/196617	third-party-advisory, x_refsource_CERT-VN
	http://www.vupen.com/english/advisories/2010/1040	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2009-0458.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34991	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:101	vendor-advisory, x_refsource_MANDRIVA
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:087	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/35685	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1076	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/34756	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34291	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34755	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34852	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34959	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34746	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0429.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id?1022073	vdb-entry, x_refsource_SECTRACK

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:04:49.234Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1793",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1793"
          },
          {
            "name": "34963",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34963"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495896"
          },
          {
            "name": "DSA-1790",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1790"
          },
          {
            "name": "35037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35037"
          },
          {
            "name": "ADV-2009-1077",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1077"
          },
          {
            "name": "35064",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35064"
          },
          {
            "name": "ADV-2009-1066",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1066"
          },
          {
            "name": "34481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34481"
          },
          {
            "name": "SSA:2009-129-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
          },
          {
            "name": "RHSA-2009:0431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
          },
          {
            "name": "ADV-2009-1065",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1065"
          },
          {
            "name": "RHSA-2009:0430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
          },
          {
            "name": "FEDORA-2009-6972",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
          },
          {
            "name": "35618",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35618"
          },
          {
            "name": "oval:org.mitre.oval:def:10735",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10735"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "RHSA-2009:0480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://poppler.freedesktop.org/releases.html"
          },
          {
            "name": "34568",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34568"
          },
          {
            "name": "MDVSA-2011:175",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
          },
          {
            "name": "VU#196617",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/196617"
          },
          {
            "name": "ADV-2010-1040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1040"
          },
          {
            "name": "SUSE-SA:2009:024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
          },
          {
            "name": "RHSA-2009:0458",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
          },
          {
            "name": "FEDORA-2009-6982",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
          },
          {
            "name": "34991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34991"
          },
          {
            "name": "MDVSA-2009:101",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
          },
          {
            "name": "MDVSA-2010:087",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "35685",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35685"
          },
          {
            "name": "ADV-2009-1076",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1076"
          },
          {
            "name": "34756",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34756"
          },
          {
            "name": "34291",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34291"
          },
          {
            "name": "34755",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34755"
          },
          {
            "name": "34852",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34852"
          },
          {
            "name": "SUSE-SR:2009:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
          },
          {
            "name": "FEDORA-2009-6973",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
          },
          {
            "name": "34959",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34959"
          },
          {
            "name": "34746",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34746"
          },
          {
            "name": "RHSA-2009:0429",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
          },
          {
            "name": "1022073",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022073"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-1793",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1793"
        },
        {
          "name": "34963",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34963"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495896"
        },
        {
          "name": "DSA-1790",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1790"
        },
        {
          "name": "35037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35037"
        },
        {
          "name": "ADV-2009-1077",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1077"
        },
        {
          "name": "35064",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35064"
        },
        {
          "name": "ADV-2009-1066",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1066"
        },
        {
          "name": "34481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34481"
        },
        {
          "name": "SSA:2009-129-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
        },
        {
          "name": "RHSA-2009:0431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
        },
        {
          "name": "ADV-2009-1065",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1065"
        },
        {
          "name": "RHSA-2009:0430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
        },
        {
          "name": "FEDORA-2009-6972",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
        },
        {
          "name": "35618",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35618"
        },
        {
          "name": "oval:org.mitre.oval:def:10735",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10735"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "RHSA-2009:0480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://poppler.freedesktop.org/releases.html"
        },
        {
          "name": "34568",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34568"
        },
        {
          "name": "MDVSA-2011:175",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
        },
        {
          "name": "VU#196617",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/196617"
        },
        {
          "name": "ADV-2010-1040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1040"
        },
        {
          "name": "SUSE-SA:2009:024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
        },
        {
          "name": "RHSA-2009:0458",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
        },
        {
          "name": "FEDORA-2009-6982",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
        },
        {
          "name": "34991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34991"
        },
        {
          "name": "MDVSA-2009:101",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
        },
        {
          "name": "MDVSA-2010:087",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "35685",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35685"
        },
        {
          "name": "ADV-2009-1076",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1076"
        },
        {
          "name": "34756",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34756"
        },
        {
          "name": "34291",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34291"
        },
        {
          "name": "34755",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34755"
        },
        {
          "name": "34852",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34852"
        },
        {
          "name": "SUSE-SR:2009:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
        },
        {
          "name": "FEDORA-2009-6973",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
        },
        {
          "name": "34959",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34959"
        },
        {
          "name": "34746",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34746"
        },
        {
          "name": "RHSA-2009:0429",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
        },
        {
          "name": "1022073",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022073"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-1182",
    "datePublished": "2009-04-23T17:00:00",
    "dateReserved": "2009-03-31T00:00:00",
    "dateUpdated": "2024-08-07T05:04:49.234Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-1181

Vulnerability from cvelistv5

Published

2009-04-23 17:00

Modified

2024-08-07 05:04

Severity ?

Summary

References

▼	URL	Tags
	http://www.debian.org/security/2009/dsa-1793	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/34963	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2009/dsa-1790	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/35037	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1077	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/35064	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1066	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/34481	third-party-advisory, x_refsource_SECUNIA
	http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477	vendor-advisory, x_refsource_SLACKWARE
	http://www.securitytracker.com/id?1022072	vdb-entry, x_refsource_SECTRACK
	http://www.redhat.com/support/errata/RHSA-2009-0431.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/1065	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2009-0430.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/35618	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0480.html	vendor-advisory, x_refsource_REDHAT
	http://poppler.freedesktop.org/releases.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/34568	vdb-entry, x_refsource_BID
	http://www.mandriva.com/security/advisories?name=MDVSA-2011:175	vendor-advisory, x_refsource_MANDRIVA
	http://www.kb.cert.org/vuls/id/196617	third-party-advisory, x_refsource_CERT-VN
	http://www.vupen.com/english/advisories/2010/1040	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2009-0458.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34991	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:101	vendor-advisory, x_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9683	vdb-entry, signature, x_refsource_OVAL
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:087	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/35685	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1076	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/34756	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34291	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34755	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34852	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34959	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.redhat.com/show_bug.cgi?id=495894	x_refsource_CONFIRM
	http://secunia.com/advisories/34746	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0429.html	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:04:49.236Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1793",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1793"
          },
          {
            "name": "34963",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34963"
          },
          {
            "name": "DSA-1790",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1790"
          },
          {
            "name": "35037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35037"
          },
          {
            "name": "ADV-2009-1077",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1077"
          },
          {
            "name": "35064",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35064"
          },
          {
            "name": "ADV-2009-1066",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1066"
          },
          {
            "name": "34481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34481"
          },
          {
            "name": "SSA:2009-129-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
          },
          {
            "name": "1022072",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022072"
          },
          {
            "name": "RHSA-2009:0431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
          },
          {
            "name": "ADV-2009-1065",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1065"
          },
          {
            "name": "RHSA-2009:0430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
          },
          {
            "name": "FEDORA-2009-6972",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
          },
          {
            "name": "35618",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35618"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "RHSA-2009:0480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://poppler.freedesktop.org/releases.html"
          },
          {
            "name": "34568",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34568"
          },
          {
            "name": "MDVSA-2011:175",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
          },
          {
            "name": "VU#196617",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/196617"
          },
          {
            "name": "ADV-2010-1040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1040"
          },
          {
            "name": "SUSE-SA:2009:024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
          },
          {
            "name": "RHSA-2009:0458",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
          },
          {
            "name": "FEDORA-2009-6982",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
          },
          {
            "name": "34991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34991"
          },
          {
            "name": "MDVSA-2009:101",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
          },
          {
            "name": "oval:org.mitre.oval:def:9683",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9683"
          },
          {
            "name": "MDVSA-2010:087",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "35685",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35685"
          },
          {
            "name": "ADV-2009-1076",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1076"
          },
          {
            "name": "34756",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34756"
          },
          {
            "name": "34291",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34291"
          },
          {
            "name": "34755",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34755"
          },
          {
            "name": "34852",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34852"
          },
          {
            "name": "SUSE-SR:2009:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
          },
          {
            "name": "FEDORA-2009-6973",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
          },
          {
            "name": "34959",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34959"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495894"
          },
          {
            "name": "34746",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34746"
          },
          {
            "name": "RHSA-2009:0429",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-1793",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1793"
        },
        {
          "name": "34963",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34963"
        },
        {
          "name": "DSA-1790",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1790"
        },
        {
          "name": "35037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35037"
        },
        {
          "name": "ADV-2009-1077",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1077"
        },
        {
          "name": "35064",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35064"
        },
        {
          "name": "ADV-2009-1066",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1066"
        },
        {
          "name": "34481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34481"
        },
        {
          "name": "SSA:2009-129-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
        },
        {
          "name": "1022072",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022072"
        },
        {
          "name": "RHSA-2009:0431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
        },
        {
          "name": "ADV-2009-1065",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1065"
        },
        {
          "name": "RHSA-2009:0430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
        },
        {
          "name": "FEDORA-2009-6972",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
        },
        {
          "name": "35618",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35618"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "RHSA-2009:0480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://poppler.freedesktop.org/releases.html"
        },
        {
          "name": "34568",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34568"
        },
        {
          "name": "MDVSA-2011:175",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
        },
        {
          "name": "VU#196617",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/196617"
        },
        {
          "name": "ADV-2010-1040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1040"
        },
        {
          "name": "SUSE-SA:2009:024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
        },
        {
          "name": "RHSA-2009:0458",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
        },
        {
          "name": "FEDORA-2009-6982",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
        },
        {
          "name": "34991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34991"
        },
        {
          "name": "MDVSA-2009:101",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
        },
        {
          "name": "oval:org.mitre.oval:def:9683",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9683"
        },
        {
          "name": "MDVSA-2010:087",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "35685",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35685"
        },
        {
          "name": "ADV-2009-1076",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1076"
        },
        {
          "name": "34756",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34756"
        },
        {
          "name": "34291",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34291"
        },
        {
          "name": "34755",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34755"
        },
        {
          "name": "34852",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34852"
        },
        {
          "name": "SUSE-SR:2009:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
        },
        {
          "name": "FEDORA-2009-6973",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
        },
        {
          "name": "34959",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34959"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495894"
        },
        {
          "name": "34746",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34746"
        },
        {
          "name": "RHSA-2009:0429",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-1181",
    "datePublished": "2009-04-23T17:00:00",
    "dateReserved": "2009-03-31T00:00:00",
    "dateUpdated": "2024-08-07T05:04:49.236Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-1179

Vulnerability from cvelistv5

Published

2009-04-23 17:00

Modified

2024-08-07 05:04

Severity ?

Summary

Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.

References

▼	URL	Tags
	http://www.debian.org/security/2009/dsa-1793	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/34963	third-party-advisory, x_refsource_SECUNIA
	http://support.apple.com/kb/HT3639	x_refsource_CONFIRM
	http://www.debian.org/security/2009/dsa-1790	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/35037	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1077	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2009/1621	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/35064	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1066	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/34481	third-party-advisory, x_refsource_SECUNIA
	http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477	vendor-advisory, x_refsource_SLACKWARE
	http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html	vendor-advisory, x_refsource_APPLE
	http://www.redhat.com/support/errata/RHSA-2009-0431.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/1065	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2009-0430.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/1522	vdb-entry, x_refsource_VUPEN
	https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/35618	third-party-advisory, x_refsource_SECUNIA
	http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html	vendor-advisory, x_refsource_APPLE
	http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.redhat.com/show_bug.cgi?id=495889	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2009-0480.html	vendor-advisory, x_refsource_REDHAT
	http://poppler.freedesktop.org/releases.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/34568	vdb-entry, x_refsource_BID
	http://www.mandriva.com/security/advisories?name=MDVSA-2011:175	vendor-advisory, x_refsource_MANDRIVA
	http://www.kb.cert.org/vuls/id/196617	third-party-advisory, x_refsource_CERT-VN
	http://www.vupen.com/english/advisories/2010/1040	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2009-0458.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34991	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35379	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:101	vendor-advisory, x_refsource_MANDRIVA
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:087	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/35685	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1076	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/34756	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34291	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34755	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34852	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34959	third-party-advisory, x_refsource_SECUNIA
	http://support.apple.com/kb/HT3613	x_refsource_CONFIRM
	http://secunia.com/advisories/34746	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0429.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id?1022073	vdb-entry, x_refsource_SECTRACK
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11892	vdb-entry, signature, x_refsource_OVAL

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:04:49.216Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1793",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1793"
          },
          {
            "name": "34963",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34963"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3639"
          },
          {
            "name": "DSA-1790",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1790"
          },
          {
            "name": "35037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35037"
          },
          {
            "name": "ADV-2009-1077",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1077"
          },
          {
            "name": "ADV-2009-1621",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1621"
          },
          {
            "name": "35064",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35064"
          },
          {
            "name": "ADV-2009-1066",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1066"
          },
          {
            "name": "34481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34481"
          },
          {
            "name": "SSA:2009-129-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
          },
          {
            "name": "APPLE-SA-2009-06-08-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html"
          },
          {
            "name": "RHSA-2009:0431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
          },
          {
            "name": "ADV-2009-1065",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1065"
          },
          {
            "name": "RHSA-2009:0430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
          },
          {
            "name": "ADV-2009-1522",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1522"
          },
          {
            "name": "FEDORA-2009-6972",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
          },
          {
            "name": "35618",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35618"
          },
          {
            "name": "APPLE-SA-2009-06-17-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495889"
          },
          {
            "name": "RHSA-2009:0480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://poppler.freedesktop.org/releases.html"
          },
          {
            "name": "34568",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34568"
          },
          {
            "name": "MDVSA-2011:175",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
          },
          {
            "name": "VU#196617",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/196617"
          },
          {
            "name": "ADV-2010-1040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1040"
          },
          {
            "name": "SUSE-SA:2009:024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
          },
          {
            "name": "RHSA-2009:0458",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
          },
          {
            "name": "FEDORA-2009-6982",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
          },
          {
            "name": "34991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34991"
          },
          {
            "name": "35379",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35379"
          },
          {
            "name": "MDVSA-2009:101",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
          },
          {
            "name": "MDVSA-2010:087",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "35685",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35685"
          },
          {
            "name": "ADV-2009-1076",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1076"
          },
          {
            "name": "34756",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34756"
          },
          {
            "name": "34291",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34291"
          },
          {
            "name": "34755",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34755"
          },
          {
            "name": "34852",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34852"
          },
          {
            "name": "SUSE-SR:2009:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
          },
          {
            "name": "FEDORA-2009-6973",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
          },
          {
            "name": "34959",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34959"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3613"
          },
          {
            "name": "34746",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34746"
          },
          {
            "name": "RHSA-2009:0429",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
          },
          {
            "name": "1022073",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022073"
          },
          {
            "name": "oval:org.mitre.oval:def:11892",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11892"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-1793",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1793"
        },
        {
          "name": "34963",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34963"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3639"
        },
        {
          "name": "DSA-1790",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1790"
        },
        {
          "name": "35037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35037"
        },
        {
          "name": "ADV-2009-1077",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1077"
        },
        {
          "name": "ADV-2009-1621",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1621"
        },
        {
          "name": "35064",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35064"
        },
        {
          "name": "ADV-2009-1066",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1066"
        },
        {
          "name": "34481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34481"
        },
        {
          "name": "SSA:2009-129-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
        },
        {
          "name": "APPLE-SA-2009-06-08-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html"
        },
        {
          "name": "RHSA-2009:0431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
        },
        {
          "name": "ADV-2009-1065",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1065"
        },
        {
          "name": "RHSA-2009:0430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
        },
        {
          "name": "ADV-2009-1522",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1522"
        },
        {
          "name": "FEDORA-2009-6972",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
        },
        {
          "name": "35618",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35618"
        },
        {
          "name": "APPLE-SA-2009-06-17-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495889"
        },
        {
          "name": "RHSA-2009:0480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://poppler.freedesktop.org/releases.html"
        },
        {
          "name": "34568",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34568"
        },
        {
          "name": "MDVSA-2011:175",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
        },
        {
          "name": "VU#196617",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/196617"
        },
        {
          "name": "ADV-2010-1040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1040"
        },
        {
          "name": "SUSE-SA:2009:024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
        },
        {
          "name": "RHSA-2009:0458",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
        },
        {
          "name": "FEDORA-2009-6982",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
        },
        {
          "name": "34991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34991"
        },
        {
          "name": "35379",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35379"
        },
        {
          "name": "MDVSA-2009:101",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
        },
        {
          "name": "MDVSA-2010:087",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "35685",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35685"
        },
        {
          "name": "ADV-2009-1076",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1076"
        },
        {
          "name": "34756",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34756"
        },
        {
          "name": "34291",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34291"
        },
        {
          "name": "34755",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34755"
        },
        {
          "name": "34852",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34852"
        },
        {
          "name": "SUSE-SR:2009:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
        },
        {
          "name": "FEDORA-2009-6973",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
        },
        {
          "name": "34959",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34959"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3613"
        },
        {
          "name": "34746",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34746"
        },
        {
          "name": "RHSA-2009:0429",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
        },
        {
          "name": "1022073",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022073"
        },
        {
          "name": "oval:org.mitre.oval:def:11892",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11892"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-1179",
    "datePublished": "2009-04-23T17:00:00",
    "dateReserved": "2009-03-31T00:00:00",
    "dateUpdated": "2024-08-07T05:04:49.216Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-0166

Vulnerability from cvelistv5

Published

2009-04-23 17:00

Modified

2024-08-07 04:24

Severity ?

Summary

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory.

References

▼	URL	Tags
	http://www.debian.org/security/2009/dsa-1793	vendor-advisory, x_refsource_DEBIAN
	http://security.gentoo.org/glsa/glsa-200904-20.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/34963	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2009/dsa-1790	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/35037	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1077	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/35064	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1066	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/34481	third-party-advisory, x_refsource_SECUNIA
	http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477	vendor-advisory, x_refsource_SLACKWARE
	http://www.redhat.com/support/errata/RHSA-2009-0431.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/1065	vdb-entry, x_refsource_VUPEN
	http://wiki.rpath.com/Advisories:rPSA-2009-0061	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2009-0430.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/35618	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0480.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/34568	vdb-entry, x_refsource_BID
	http://www.securityfocus.com/archive/1/502750/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.vupen.com/english/advisories/2010/1040	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2009-0458.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34991	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.redhat.com/show_bug.cgi?id=490625	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:101	vendor-advisory, x_refsource_MANDRIVA
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:087	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/35685	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34756	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34291	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34755	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34852	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34959	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9778	vdb-entry, signature, x_refsource_OVAL
	http://www.redhat.com/support/errata/RHSA-2009-0429.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id?1022073	vdb-entry, x_refsource_SECTRACK

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:24:18.237Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1793",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1793"
          },
          {
            "name": "GLSA-200904-20",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200904-20.xml"
          },
          {
            "name": "34963",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34963"
          },
          {
            "name": "DSA-1790",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1790"
          },
          {
            "name": "35037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35037"
          },
          {
            "name": "ADV-2009-1077",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1077"
          },
          {
            "name": "35064",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35064"
          },
          {
            "name": "ADV-2009-1066",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1066"
          },
          {
            "name": "34481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34481"
          },
          {
            "name": "SSA:2009-129-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
          },
          {
            "name": "RHSA-2009:0431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
          },
          {
            "name": "ADV-2009-1065",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1065"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0061"
          },
          {
            "name": "RHSA-2009:0430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
          },
          {
            "name": "FEDORA-2009-6972",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
          },
          {
            "name": "35618",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35618"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "RHSA-2009:0480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
          },
          {
            "name": "34568",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34568"
          },
          {
            "name": "20090417 rPSA-2009-0061-1 cups",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/502750/100/0/threaded"
          },
          {
            "name": "ADV-2010-1040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1040"
          },
          {
            "name": "SUSE-SA:2009:024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
          },
          {
            "name": "RHSA-2009:0458",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
          },
          {
            "name": "FEDORA-2009-6982",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
          },
          {
            "name": "34991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34991"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490625"
          },
          {
            "name": "MDVSA-2009:101",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
          },
          {
            "name": "MDVSA-2010:087",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "35685",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35685"
          },
          {
            "name": "34756",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34756"
          },
          {
            "name": "34291",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34291"
          },
          {
            "name": "34755",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34755"
          },
          {
            "name": "34852",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34852"
          },
          {
            "name": "SUSE-SR:2009:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
          },
          {
            "name": "FEDORA-2009-6973",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
          },
          {
            "name": "34959",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34959"
          },
          {
            "name": "oval:org.mitre.oval:def:9778",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9778"
          },
          {
            "name": "RHSA-2009:0429",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
          },
          {
            "name": "1022073",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022073"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-1793",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1793"
        },
        {
          "name": "GLSA-200904-20",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200904-20.xml"
        },
        {
          "name": "34963",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34963"
        },
        {
          "name": "DSA-1790",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1790"
        },
        {
          "name": "35037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35037"
        },
        {
          "name": "ADV-2009-1077",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1077"
        },
        {
          "name": "35064",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35064"
        },
        {
          "name": "ADV-2009-1066",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1066"
        },
        {
          "name": "34481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34481"
        },
        {
          "name": "SSA:2009-129-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
        },
        {
          "name": "RHSA-2009:0431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
        },
        {
          "name": "ADV-2009-1065",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1065"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0061"
        },
        {
          "name": "RHSA-2009:0430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
        },
        {
          "name": "FEDORA-2009-6972",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
        },
        {
          "name": "35618",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35618"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "RHSA-2009:0480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
        },
        {
          "name": "34568",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34568"
        },
        {
          "name": "20090417 rPSA-2009-0061-1 cups",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/502750/100/0/threaded"
        },
        {
          "name": "ADV-2010-1040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1040"
        },
        {
          "name": "SUSE-SA:2009:024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
        },
        {
          "name": "RHSA-2009:0458",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
        },
        {
          "name": "FEDORA-2009-6982",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
        },
        {
          "name": "34991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34991"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490625"
        },
        {
          "name": "MDVSA-2009:101",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
        },
        {
          "name": "MDVSA-2010:087",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "35685",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35685"
        },
        {
          "name": "34756",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34756"
        },
        {
          "name": "34291",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34291"
        },
        {
          "name": "34755",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34755"
        },
        {
          "name": "34852",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34852"
        },
        {
          "name": "SUSE-SR:2009:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
        },
        {
          "name": "FEDORA-2009-6973",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
        },
        {
          "name": "34959",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34959"
        },
        {
          "name": "oval:org.mitre.oval:def:9778",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9778"
        },
        {
          "name": "RHSA-2009:0429",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
        },
        {
          "name": "1022073",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022073"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-0166",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-1793",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2009/dsa-1793"
            },
            {
              "name": "GLSA-200904-20",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200904-20.xml"
            },
            {
              "name": "34963",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34963"
            },
            {
              "name": "DSA-1790",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2009/dsa-1790"
            },
            {
              "name": "35037",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35037"
            },
            {
              "name": "ADV-2009-1077",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1077"
            },
            {
              "name": "35064",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35064"
            },
            {
              "name": "ADV-2009-1066",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1066"
            },
            {
              "name": "34481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34481"
            },
            {
              "name": "SSA:2009-129-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
            },
            {
              "name": "RHSA-2009:0431",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
            },
            {
              "name": "ADV-2009-1065",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1065"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2009-0061",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0061"
            },
            {
              "name": "RHSA-2009:0430",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
            },
            {
              "name": "FEDORA-2009-6972",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
            },
            {
              "name": "35618",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35618"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "RHSA-2009:0480",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
            },
            {
              "name": "34568",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/34568"
            },
            {
              "name": "20090417 rPSA-2009-0061-1 cups",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/502750/100/0/threaded"
            },
            {
              "name": "ADV-2010-1040",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1040"
            },
            {
              "name": "SUSE-SA:2009:024",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
            },
            {
              "name": "RHSA-2009:0458",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
            },
            {
              "name": "FEDORA-2009-6982",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
            },
            {
              "name": "34991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34991"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=490625",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490625"
            },
            {
              "name": "MDVSA-2009:101",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
            },
            {
              "name": "MDVSA-2010:087",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "35685",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35685"
            },
            {
              "name": "34756",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34756"
            },
            {
              "name": "34291",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34291"
            },
            {
              "name": "34755",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34755"
            },
            {
              "name": "34852",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34852"
            },
            {
              "name": "SUSE-SR:2009:012",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
            },
            {
              "name": "FEDORA-2009-6973",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
            },
            {
              "name": "34959",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34959"
            },
            {
              "name": "oval:org.mitre.oval:def:9778",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9778"
            },
            {
              "name": "RHSA-2009:0429",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
            },
            {
              "name": "1022073",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1022073"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-0166",
    "datePublished": "2009-04-23T17:00:00",
    "dateReserved": "2009-01-16T00:00:00",
    "dateUpdated": "2024-08-07T04:24:18.237Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-0800

Vulnerability from cvelistv5

Published

2009-04-23 17:00

Modified

2024-08-07 04:48

Severity ?

Summary

Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.

References

▼	URL	Tags
	http://www.debian.org/security/2009/dsa-1793	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/34963	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2009/dsa-1790	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/35037	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1077	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/35064	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1066	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/34481	third-party-advisory, x_refsource_SECUNIA
	http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477	vendor-advisory, x_refsource_SLACKWARE
	http://www.redhat.com/support/errata/RHSA-2009-0431.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/1065	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2009-0430.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/35618	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.redhat.com/show_bug.cgi?id=495887	x_refsource_CONFIRM
	http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0480.html	vendor-advisory, x_refsource_REDHAT
	http://poppler.freedesktop.org/releases.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/34568	vdb-entry, x_refsource_BID
	http://www.mandriva.com/security/advisories?name=MDVSA-2011:175	vendor-advisory, x_refsource_MANDRIVA
	http://www.kb.cert.org/vuls/id/196617	third-party-advisory, x_refsource_CERT-VN
	http://www.vupen.com/english/advisories/2010/1040	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2009-0458.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34991	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:101	vendor-advisory, x_refsource_MANDRIVA
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:087	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/35685	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1076	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/34756	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34291	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34755	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34852	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/34959	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11323	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/34746	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0429.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id?1022073	vdb-entry, x_refsource_SECTRACK

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:48:52.150Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1793",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1793"
          },
          {
            "name": "34963",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34963"
          },
          {
            "name": "DSA-1790",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1790"
          },
          {
            "name": "35037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35037"
          },
          {
            "name": "ADV-2009-1077",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1077"
          },
          {
            "name": "35064",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35064"
          },
          {
            "name": "ADV-2009-1066",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1066"
          },
          {
            "name": "34481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34481"
          },
          {
            "name": "SSA:2009-129-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
          },
          {
            "name": "RHSA-2009:0431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
          },
          {
            "name": "ADV-2009-1065",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1065"
          },
          {
            "name": "RHSA-2009:0430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
          },
          {
            "name": "FEDORA-2009-6972",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
          },
          {
            "name": "35618",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35618"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495887"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "RHSA-2009:0480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://poppler.freedesktop.org/releases.html"
          },
          {
            "name": "34568",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34568"
          },
          {
            "name": "MDVSA-2011:175",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
          },
          {
            "name": "VU#196617",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/196617"
          },
          {
            "name": "ADV-2010-1040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1040"
          },
          {
            "name": "SUSE-SA:2009:024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
          },
          {
            "name": "RHSA-2009:0458",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
          },
          {
            "name": "FEDORA-2009-6982",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
          },
          {
            "name": "34991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34991"
          },
          {
            "name": "MDVSA-2009:101",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
          },
          {
            "name": "MDVSA-2010:087",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "35685",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35685"
          },
          {
            "name": "ADV-2009-1076",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1076"
          },
          {
            "name": "34756",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34756"
          },
          {
            "name": "34291",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34291"
          },
          {
            "name": "34755",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34755"
          },
          {
            "name": "34852",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34852"
          },
          {
            "name": "SUSE-SR:2009:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
          },
          {
            "name": "FEDORA-2009-6973",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
          },
          {
            "name": "34959",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34959"
          },
          {
            "name": "oval:org.mitre.oval:def:11323",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11323"
          },
          {
            "name": "34746",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34746"
          },
          {
            "name": "RHSA-2009:0429",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
          },
          {
            "name": "1022073",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022073"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple \"input validation flaws\" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-1793",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1793"
        },
        {
          "name": "34963",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34963"
        },
        {
          "name": "DSA-1790",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1790"
        },
        {
          "name": "35037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35037"
        },
        {
          "name": "ADV-2009-1077",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1077"
        },
        {
          "name": "35064",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35064"
        },
        {
          "name": "ADV-2009-1066",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1066"
        },
        {
          "name": "34481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34481"
        },
        {
          "name": "SSA:2009-129-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.578477"
        },
        {
          "name": "RHSA-2009:0431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0431.html"
        },
        {
          "name": "ADV-2009-1065",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1065"
        },
        {
          "name": "RHSA-2009:0430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0430.html"
        },
        {
          "name": "FEDORA-2009-6972",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
        },
        {
          "name": "35618",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35618"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495887"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "RHSA-2009:0480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://poppler.freedesktop.org/releases.html"
        },
        {
          "name": "34568",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34568"
        },
        {
          "name": "MDVSA-2011:175",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
        },
        {
          "name": "VU#196617",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/196617"
        },
        {
          "name": "ADV-2010-1040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1040"
        },
        {
          "name": "SUSE-SA:2009:024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
        },
        {
          "name": "RHSA-2009:0458",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
        },
        {
          "name": "FEDORA-2009-6982",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
        },
        {
          "name": "34991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34991"
        },
        {
          "name": "MDVSA-2009:101",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101"
        },
        {
          "name": "MDVSA-2010:087",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "35685",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35685"
        },
        {
          "name": "ADV-2009-1076",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1076"
        },
        {
          "name": "34756",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34756"
        },
        {
          "name": "34291",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34291"
        },
        {
          "name": "34755",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34755"
        },
        {
          "name": "34852",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34852"
        },
        {
          "name": "SUSE-SR:2009:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
        },
        {
          "name": "FEDORA-2009-6973",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
        },
        {
          "name": "34959",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34959"
        },
        {
          "name": "oval:org.mitre.oval:def:11323",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11323"
        },
        {
          "name": "34746",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34746"
        },
        {
          "name": "RHSA-2009:0429",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
        },
        {
          "name": "1022073",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022073"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-0800",
    "datePublished": "2009-04-23T17:00:00",
    "dateReserved": "2009-03-04T00:00:00",
    "dateUpdated": "2024-08-07T04:48:52.150Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature