csaf_redhat - rhsa-2009

rhsa-2009_1503

Vulnerability from csaf_redhat

Published

2009-10-15 08:45

Modified

2024-11-22 03:04

Summary

Red Hat Security Advisory: gpdf security update

Notes

Topic

An updated gpdf package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team.

Details

GPdf is a viewer for Portable Document Format (PDF) files. Multiple integer overflow flaws were found in GPdf. An attacker could create a malicious PDF file that would cause GPdf to crash or, potentially, execute arbitrary code when opened. (CVE-2009-0791, CVE-2009-1188, CVE-2009-3604, CVE-2009-3608, CVE-2009-3609) Red Hat would like to thank Adam Zabrocki for reporting the CVE-2009-3604 issue, and Chris Rohlf for reporting the CVE-2009-3608 issue. Users are advised to upgrade to this updated package, which contains a backported patch to correct these issues.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated gpdf package that fixes multiple security issues is now\navailable for Red Hat Enterprise Linux 4.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "GPdf is a viewer for Portable Document Format (PDF) files.\n\nMultiple integer overflow flaws were found in GPdf. An attacker could\ncreate a malicious PDF file that would cause GPdf to crash or, potentially,\nexecute arbitrary code when opened. (CVE-2009-0791, CVE-2009-1188,\nCVE-2009-3604, CVE-2009-3608, CVE-2009-3609)\n\nRed Hat would like to thank Adam Zabrocki for reporting the CVE-2009-3604\nissue, and Chris Rohlf for reporting the CVE-2009-3608 issue.\n\nUsers are advised to upgrade to this updated package, which contains a\nbackported patch to correct these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2009:1503",
        "url": "https://access.redhat.com/errata/RHSA-2009:1503"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "491840",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=491840"
      },
      {
        "category": "external",
        "summary": "495907",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495907"
      },
      {
        "category": "external",
        "summary": "526637",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=526637"
      },
      {
        "category": "external",
        "summary": "526893",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=526893"
      },
      {
        "category": "external",
        "summary": "526911",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=526911"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1503.json"
      }
    ],
    "title": "Red Hat Security Advisory: gpdf security update",
    "tracking": {
      "current_release_date": "2024-11-22T03:04:08+00:00",
      "generator": {
        "date": "2024-11-22T03:04:08+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2009:1503",
      "initial_release_date": "2009-10-15T08:45:00+00:00",
      "revision_history": [
        {
          "date": "2009-10-15T08:45:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2009-10-15T04:48:32+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T03:04:08+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4",
                  "product_id": "4AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop version 4",
                  "product_id": "4Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4",
                  "product_id": "4ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4",
                  "product_id": "4WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
                "product": {
                  "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
                  "product_id": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf-debuginfo@2.8.2-7.7.2.el4_8.5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
                "product": {
                  "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
                  "product_id": "gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf@2.8.2-7.7.2.el4_8.5?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
                "product": {
                  "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
                  "product_id": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf-debuginfo@2.8.2-7.7.2.el4_8.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
                "product": {
                  "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
                  "product_id": "gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf@2.8.2-7.7.2.el4_8.5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
                "product": {
                  "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
                  "product_id": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf-debuginfo@2.8.2-7.7.2.el4_8.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
                "product": {
                  "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
                  "product_id": "gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf@2.8.2-7.7.2.el4_8.5?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.src",
                "product": {
                  "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.src",
                  "product_id": "gpdf-0:2.8.2-7.7.2.el4_8.5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf@2.8.2-7.7.2.el4_8.5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
                "product": {
                  "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
                  "product_id": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf-debuginfo@2.8.2-7.7.2.el4_8.5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
                "product": {
                  "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
                  "product_id": "gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf@2.8.2-7.7.2.el4_8.5?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
                "product": {
                  "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
                  "product_id": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf-debuginfo@2.8.2-7.7.2.el4_8.5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
                "product": {
                  "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
                  "product_id": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf@2.8.2-7.7.2.el4_8.5?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
                "product": {
                  "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
                  "product_id": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf-debuginfo@2.8.2-7.7.2.el4_8.5?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
                "product": {
                  "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
                  "product_id": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gpdf@2.8.2-7.7.2.el4_8.5?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.src as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.src"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.src",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.i386"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.src as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.src"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.src",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.i386"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.src as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.src"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.src",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.src as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.src"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.src",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64"
        },
        "product_reference": "gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
        },
        "product_reference": "gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
        "relates_to_product_reference": "4WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2009-0791",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2009-03-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "491840"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xpdf: multiple integer overflows",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-0791"
        },
        {
          "category": "external",
          "summary": "RHBZ#491840",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=491840"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-0791",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-0791"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0791",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0791"
        }
      ],
      "release_date": "2009-05-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-10-15T08:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1503"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "xpdf: multiple integer overflows"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Will Dormann"
          ],
          "organization": "CERT/CC"
        }
      ],
      "cve": "CVE-2009-1188",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2009-03-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "495907"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xpdf/poppler: SplashBitmap integer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1188"
        },
        {
          "category": "external",
          "summary": "RHBZ#495907",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495907"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1188",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1188"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1188",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1188"
        }
      ],
      "release_date": "2009-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-10-15T08:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1503"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xpdf/poppler: SplashBitmap integer overflow"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Adam Zabrocki"
          ]
        }
      ],
      "cve": "CVE-2009-3604",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2009-09-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "526911"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xpdf/poppler: Splash:: drawImage integer overflow and missing allocation return value check",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3604"
        },
        {
          "category": "external",
          "summary": "RHBZ#526911",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=526911"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3604",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3604"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3604",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3604"
        }
      ],
      "release_date": "2009-10-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-10-15T08:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1503"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xpdf/poppler: Splash:: drawImage integer overflow and missing allocation return value check"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Chris Rohlf"
          ]
        }
      ],
      "cve": "CVE-2009-3608",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2009-09-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "526637"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xpdf/poppler: integer overflow in ObjectStream::ObjectStream (oCERT-2009-016)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3608"
        },
        {
          "category": "external",
          "summary": "RHBZ#526637",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=526637"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3608",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3608"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3608",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3608"
        }
      ],
      "release_date": "2009-10-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-10-15T08:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1503"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xpdf/poppler: integer overflow in ObjectStream::ObjectStream (oCERT-2009-016)"
    },
    {
      "cve": "CVE-2009-3609",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2009-06-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "526893"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xpdf/poppler: ImageStream:: ImageStream integer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
          "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
          "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3609"
        },
        {
          "category": "external",
          "summary": "RHBZ#526893",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=526893"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3609",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3609"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3609",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3609"
        }
      ],
      "release_date": "2009-10-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-10-15T08:45:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1503"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 2.1,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4AS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4AS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4Desktop:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4Desktop:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4ES:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4ES:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.src",
            "4WS:gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390x",
            "4WS:gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "xpdf/poppler: ImageStream:: ImageStream integer overflow"
    }
  ]
}

cve-2009-1188

Vulnerability from cvelistv5

Published

2009-04-23 19:11

Modified

2024-08-07 05:04

Severity ?

Summary

Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.

References

▼	URL	Tags
	http://secunia.com/advisories/39938	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9957	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/37028	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html	vendor-advisory, x_refsource_FEDORA
	http://bugs.gentoo.org/show_bug.cgi?id=263028#c16	x_refsource_CONFIRM
	https://rhn.redhat.com/errata/RHSA-2009-1501.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/37079	third-party-advisory, x_refsource_SECUNIA
	https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875	x_refsource_CONFIRM
	http://secunia.com/advisories/35064	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2010/dsa-2028	vendor-advisory, x_refsource_DEBIAN
	http://www.debian.org/security/2010/dsa-2050	vendor-advisory, x_refsource_DEBIAN
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html	vendor-advisory, x_refsource_FEDORA
	https://rhn.redhat.com/errata/RHSA-2009-1512.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/35618	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37077	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-0480.html	vendor-advisory, x_refsource_REDHAT
	http://poppler.freedesktop.org/releases.html	x_refsource_CONFIRM
	https://rhn.redhat.com/errata/RHSA-2009-1503.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/34568	vdb-entry, x_refsource_BID
	http://www.mandriva.com/security/advisories?name=MDVSA-2011:175	vendor-advisory, x_refsource_MANDRIVA
	http://www.kb.cert.org/vuls/id/196617	third-party-advisory, x_refsource_CERT-VN
	http://secunia.com/advisories/37037	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/1040	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0802	vdb-entry, x_refsource_VUPEN
	https://rhn.redhat.com/errata/RHSA-2009-1502.html	vendor-advisory, x_refsource_REDHAT
	https://exchange.xforce.ibmcloud.com/vulnerabilities/50185	vdb-entry, x_refsource_XF
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html	vendor-advisory, x_refsource_FEDORA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html	vendor-advisory, x_refsource_FEDORA
	http://wiki.rpath.com/Advisories:rPSA-2009-0059	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2009/2928	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:087	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2010/1220	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2009/1076	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/37053	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/502761/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/39327	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.redhat.com/show_bug.cgi?id=495907	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=526915	x_refsource_CONFIRM
	https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/37043	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/34746	third-party-advisory, x_refsource_SECUNIA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:04:49.317Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "39938",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39938"
          },
          {
            "name": "oval:org.mitre.oval:def:9957",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9957"
          },
          {
            "name": "37028",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37028"
          },
          {
            "name": "FEDORA-2010-1377",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=263028#c16"
          },
          {
            "name": "RHSA-2009:1501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1501.html"
          },
          {
            "name": "37079",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37079"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875"
          },
          {
            "name": "35064",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35064"
          },
          {
            "name": "DSA-2028",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2028"
          },
          {
            "name": "DSA-2050",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2050"
          },
          {
            "name": "FEDORA-2010-1805",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html"
          },
          {
            "name": "RHSA-2009:1512",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1512.html"
          },
          {
            "name": "FEDORA-2009-6972",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
          },
          {
            "name": "35618",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35618"
          },
          {
            "name": "37077",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37077"
          },
          {
            "name": "RHSA-2009:0480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://poppler.freedesktop.org/releases.html"
          },
          {
            "name": "RHSA-2009:1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1503.html"
          },
          {
            "name": "34568",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34568"
          },
          {
            "name": "MDVSA-2011:175",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
          },
          {
            "name": "VU#196617",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/196617"
          },
          {
            "name": "37037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37037"
          },
          {
            "name": "ADV-2010-1040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1040"
          },
          {
            "name": "ADV-2010-0802",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0802"
          },
          {
            "name": "RHSA-2009:1502",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1502.html"
          },
          {
            "name": "poppler-jbig2-splashbitmap-code-execution(50185)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50185"
          },
          {
            "name": "FEDORA-2009-6982",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
          },
          {
            "name": "FEDORA-2010-1842",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0059"
          },
          {
            "name": "ADV-2009-2928",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2928"
          },
          {
            "name": "MDVSA-2010:087",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
          },
          {
            "name": "ADV-2010-1220",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1220"
          },
          {
            "name": "ADV-2009-1076",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1076"
          },
          {
            "name": "37053",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37053"
          },
          {
            "name": "20090417 rPSA-2009-0059-1 poppler",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/502761/100/0/threaded"
          },
          {
            "name": "39327",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39327"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495907"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=526915"
          },
          {
            "name": "FEDORA-2009-6973",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
          },
          {
            "name": "37043",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37043"
          },
          {
            "name": "34746",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34746"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-04-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T18:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "39938",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39938"
        },
        {
          "name": "oval:org.mitre.oval:def:9957",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9957"
        },
        {
          "name": "37028",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37028"
        },
        {
          "name": "FEDORA-2010-1377",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=263028#c16"
        },
        {
          "name": "RHSA-2009:1501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1501.html"
        },
        {
          "name": "37079",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37079"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875"
        },
        {
          "name": "35064",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35064"
        },
        {
          "name": "DSA-2028",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2028"
        },
        {
          "name": "DSA-2050",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2050"
        },
        {
          "name": "FEDORA-2010-1805",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html"
        },
        {
          "name": "RHSA-2009:1512",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1512.html"
        },
        {
          "name": "FEDORA-2009-6972",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html"
        },
        {
          "name": "35618",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35618"
        },
        {
          "name": "37077",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37077"
        },
        {
          "name": "RHSA-2009:0480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://poppler.freedesktop.org/releases.html"
        },
        {
          "name": "RHSA-2009:1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1503.html"
        },
        {
          "name": "34568",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34568"
        },
        {
          "name": "MDVSA-2011:175",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
        },
        {
          "name": "VU#196617",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/196617"
        },
        {
          "name": "37037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37037"
        },
        {
          "name": "ADV-2010-1040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1040"
        },
        {
          "name": "ADV-2010-0802",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0802"
        },
        {
          "name": "RHSA-2009:1502",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1502.html"
        },
        {
          "name": "poppler-jbig2-splashbitmap-code-execution(50185)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50185"
        },
        {
          "name": "FEDORA-2009-6982",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html"
        },
        {
          "name": "FEDORA-2010-1842",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0059"
        },
        {
          "name": "ADV-2009-2928",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2928"
        },
        {
          "name": "MDVSA-2010:087",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
        },
        {
          "name": "ADV-2010-1220",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1220"
        },
        {
          "name": "ADV-2009-1076",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1076"
        },
        {
          "name": "37053",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37053"
        },
        {
          "name": "20090417 rPSA-2009-0059-1 poppler",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/502761/100/0/threaded"
        },
        {
          "name": "39327",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39327"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=495907"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=526915"
        },
        {
          "name": "FEDORA-2009-6973",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html"
        },
        {
          "name": "37043",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37043"
        },
        {
          "name": "34746",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34746"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-1188",
    "datePublished": "2009-04-23T19:11:00",
    "dateReserved": "2009-03-31T00:00:00",
    "dateUpdated": "2024-08-07T05:04:49.317Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3609

Vulnerability from cvelistv5

Published

2009-10-21 17:00

Modified

2024-08-07 06:31

Severity ?

Summary

Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.

References

▼	URL	Tags
	http://secunia.com/advisories/39938	third-party-advisory, x_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2009-1504.html	vendor-advisory, x_refsource_REDHAT
	ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:287	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/37028	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html	vendor-advisory, x_refsource_FEDORA
	https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html	vendor-advisory, x_refsource_FEDORA
	http://poppler.freedesktop.org/	x_refsource_CONFIRM
	https://rhn.redhat.com/errata/RHSA-2009-1501.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/37079	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8134	vdb-entry, signature, x_refsource_OVAL
	http://www.debian.org/security/2010/dsa-2028	vendor-advisory, x_refsource_DEBIAN
	http://www.debian.org/security/2010/dsa-2050	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/37159	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37054	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html	vendor-advisory, x_refsource_FEDORA
	http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1	vendor-advisory, x_refsource_SUNALERT
	https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html	vendor-advisory, x_refsource_FEDORA
	https://rhn.redhat.com/errata/RHSA-2009-1512.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/37114	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37077	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11043	vdb-entry, signature, x_refsource_OVAL
	http://securitytracker.com/id?1023029	vdb-entry, x_refsource_SECTRACK
	https://rhn.redhat.com/errata/RHSA-2009-1503.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/2926	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2011:175	vendor-advisory, x_refsource_MANDRIVA
	https://bugzilla.redhat.com/show_bug.cgi?id=526893	x_refsource_CONFIRM
	https://exchange.xforce.ibmcloud.com/vulnerabilities/53800	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/37037	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-850-3	vendor-advisory, x_refsource_UBUNTU
	http://www.vupen.com/english/advisories/2010/0802	vdb-entry, x_refsource_VUPEN
	https://rhn.redhat.com/errata/RHSA-2009-1502.html	vendor-advisory, x_refsource_REDHAT
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html	vendor-advisory, x_refsource_FEDORA
	https://rhn.redhat.com/errata/RHSA-2009-1500.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/2928	vdb-entry, x_refsource_VUPEN
	https://rhn.redhat.com/errata/RHSA-2009-1513.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/37034	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37023	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/2924	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/37051	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1	vendor-advisory, x_refsource_SUNALERT
	http://www.vupen.com/english/advisories/2010/1220	vdb-entry, x_refsource_VUPEN
	http://www.ubuntu.com/usn/USN-850-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/37061	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/39327	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37043	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/36703	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2009/2925	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2010-0755.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:334	vendor-advisory, x_refsource_MANDRIVA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:31:10.540Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "39938",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39938"
          },
          {
            "name": "RHSA-2009:1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1504.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch"
          },
          {
            "name": "MDVSA-2009:287",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:287"
          },
          {
            "name": "37028",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37028"
          },
          {
            "name": "FEDORA-2010-1377",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html"
          },
          {
            "name": "FEDORA-2009-10823",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://poppler.freedesktop.org/"
          },
          {
            "name": "RHSA-2009:1501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1501.html"
          },
          {
            "name": "37079",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37079"
          },
          {
            "name": "SUSE-SR:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html"
          },
          {
            "name": "oval:org.mitre.oval:def:8134",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8134"
          },
          {
            "name": "DSA-2028",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2028"
          },
          {
            "name": "DSA-2050",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2050"
          },
          {
            "name": "37159",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37159"
          },
          {
            "name": "37054",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37054"
          },
          {
            "name": "FEDORA-2010-1805",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html"
          },
          {
            "name": "1021706",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1"
          },
          {
            "name": "FEDORA-2009-10845",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html"
          },
          {
            "name": "RHSA-2009:1512",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1512.html"
          },
          {
            "name": "37114",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37114"
          },
          {
            "name": "37077",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37077"
          },
          {
            "name": "oval:org.mitre.oval:def:11043",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11043"
          },
          {
            "name": "1023029",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1023029"
          },
          {
            "name": "RHSA-2009:1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1503.html"
          },
          {
            "name": "ADV-2009-2926",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2926"
          },
          {
            "name": "MDVSA-2011:175",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=526893"
          },
          {
            "name": "xpdf-imagestream-dos(53800)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53800"
          },
          {
            "name": "37037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37037"
          },
          {
            "name": "USN-850-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-850-3"
          },
          {
            "name": "ADV-2010-0802",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0802"
          },
          {
            "name": "RHSA-2009:1502",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1502.html"
          },
          {
            "name": "FEDORA-2010-1842",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html"
          },
          {
            "name": "RHSA-2009:1500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1500.html"
          },
          {
            "name": "ADV-2009-2928",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2928"
          },
          {
            "name": "RHSA-2009:1513",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1513.html"
          },
          {
            "name": "37034",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37034"
          },
          {
            "name": "37023",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37023"
          },
          {
            "name": "ADV-2009-2924",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2924"
          },
          {
            "name": "37051",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37051"
          },
          {
            "name": "274030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1"
          },
          {
            "name": "ADV-2010-1220",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1220"
          },
          {
            "name": "USN-850-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-850-1"
          },
          {
            "name": "37061",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37061"
          },
          {
            "name": "39327",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39327"
          },
          {
            "name": "37043",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37043"
          },
          {
            "name": "36703",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/36703"
          },
          {
            "name": "ADV-2009-2925",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2925"
          },
          {
            "name": "RHSA-2010:0755",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0755.html"
          },
          {
            "name": "MDVSA-2009:334",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:334"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-10-15T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "39938",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39938"
        },
        {
          "name": "RHSA-2009:1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1504.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch"
        },
        {
          "name": "MDVSA-2009:287",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:287"
        },
        {
          "name": "37028",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37028"
        },
        {
          "name": "FEDORA-2010-1377",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html"
        },
        {
          "name": "FEDORA-2009-10823",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://poppler.freedesktop.org/"
        },
        {
          "name": "RHSA-2009:1501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1501.html"
        },
        {
          "name": "37079",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37079"
        },
        {
          "name": "SUSE-SR:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html"
        },
        {
          "name": "oval:org.mitre.oval:def:8134",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8134"
        },
        {
          "name": "DSA-2028",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2028"
        },
        {
          "name": "DSA-2050",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2050"
        },
        {
          "name": "37159",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37159"
        },
        {
          "name": "37054",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37054"
        },
        {
          "name": "FEDORA-2010-1805",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html"
        },
        {
          "name": "1021706",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1"
        },
        {
          "name": "FEDORA-2009-10845",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html"
        },
        {
          "name": "RHSA-2009:1512",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1512.html"
        },
        {
          "name": "37114",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37114"
        },
        {
          "name": "37077",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37077"
        },
        {
          "name": "oval:org.mitre.oval:def:11043",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11043"
        },
        {
          "name": "1023029",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1023029"
        },
        {
          "name": "RHSA-2009:1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1503.html"
        },
        {
          "name": "ADV-2009-2926",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2926"
        },
        {
          "name": "MDVSA-2011:175",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=526893"
        },
        {
          "name": "xpdf-imagestream-dos(53800)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53800"
        },
        {
          "name": "37037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37037"
        },
        {
          "name": "USN-850-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-850-3"
        },
        {
          "name": "ADV-2010-0802",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0802"
        },
        {
          "name": "RHSA-2009:1502",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1502.html"
        },
        {
          "name": "FEDORA-2010-1842",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html"
        },
        {
          "name": "RHSA-2009:1500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1500.html"
        },
        {
          "name": "ADV-2009-2928",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2928"
        },
        {
          "name": "RHSA-2009:1513",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1513.html"
        },
        {
          "name": "37034",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37034"
        },
        {
          "name": "37023",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37023"
        },
        {
          "name": "ADV-2009-2924",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2924"
        },
        {
          "name": "37051",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37051"
        },
        {
          "name": "274030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1"
        },
        {
          "name": "ADV-2010-1220",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1220"
        },
        {
          "name": "USN-850-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-850-1"
        },
        {
          "name": "37061",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37061"
        },
        {
          "name": "39327",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39327"
        },
        {
          "name": "37043",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37043"
        },
        {
          "name": "36703",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/36703"
        },
        {
          "name": "ADV-2009-2925",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2925"
        },
        {
          "name": "RHSA-2010:0755",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0755.html"
        },
        {
          "name": "MDVSA-2009:334",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:334"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-3609",
    "datePublished": "2009-10-21T17:00:00",
    "dateReserved": "2009-10-09T00:00:00",
    "dateUpdated": "2024-08-07T06:31:10.540Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3608

Vulnerability from cvelistv5

Published

2009-10-21 17:00

Modified

2024-08-07 06:31

Severity ?

Summary

Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.

References

▼	URL	Tags
	http://secunia.com/advisories/39938	third-party-advisory, x_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2009-1504.html	vendor-advisory, x_refsource_REDHAT
	ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch	x_refsource_CONFIRM
	http://www.debian.org/security/2009/dsa-1941	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:287	vendor-advisory, x_refsource_MANDRIVA
	https://bugzilla.redhat.com/show_bug.cgi?id=526637	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2009/12/01/6	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/37028	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html	vendor-advisory, x_refsource_FEDORA
	https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html	vendor-advisory, x_refsource_FEDORA
	http://poppler.freedesktop.org/	x_refsource_CONFIRM
	https://rhn.redhat.com/errata/RHSA-2009-1501.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/37079	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2010/dsa-2028	vendor-advisory, x_refsource_DEBIAN
	http://www.debian.org/security/2010/dsa-2050	vendor-advisory, x_refsource_DEBIAN
	http://www.openwall.com/lists/oss-security/2009/12/01/1	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/37159	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37054	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html	vendor-advisory, x_refsource_FEDORA
	http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1	vendor-advisory, x_refsource_SUNALERT
	https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html	vendor-advisory, x_refsource_FEDORA
	https://rhn.redhat.com/errata/RHSA-2009-1512.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/37114	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37077	third-party-advisory, x_refsource_SECUNIA
	http://securitytracker.com/id?1023029	vdb-entry, x_refsource_SECTRACK
	https://rhn.redhat.com/errata/RHSA-2009-1503.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/2926	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2011:175	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/37037	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-850-3	vendor-advisory, x_refsource_UBUNTU
	http://www.vupen.com/english/advisories/2010/0802	vdb-entry, x_refsource_VUPEN
	https://rhn.redhat.com/errata/RHSA-2009-1502.html	vendor-advisory, x_refsource_REDHAT
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html	vendor-advisory, x_refsource_FEDORA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/53794	vdb-entry, x_refsource_XF
	http://www.vupen.com/english/advisories/2009/2928	vdb-entry, x_refsource_VUPEN
	https://rhn.redhat.com/errata/RHSA-2009-1513.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/37034	third-party-advisory, x_refsource_SECUNIA
	http://www.openwall.com/lists/oss-security/2009/12/01/5	mailing-list, x_refsource_MLIST
	http://www.vupen.com/english/advisories/2009/2924	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/37051	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1	vendor-advisory, x_refsource_SUNALERT
	http://www.vupen.com/english/advisories/2010/1220	vdb-entry, x_refsource_VUPEN
	http://www.ubuntu.com/usn/USN-850-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/37053	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37061	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/39327	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37043	third-party-advisory, x_refsource_SECUNIA
	http://www.ocert.org/advisories/ocert-2009-016.html	x_refsource_MISC
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9536	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/36703	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2009/2925	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:334	vendor-advisory, x_refsource_MANDRIVA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:31:10.520Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "39938",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39938"
          },
          {
            "name": "RHSA-2009:1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1504.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch"
          },
          {
            "name": "DSA-1941",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1941"
          },
          {
            "name": "MDVSA-2009:287",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=526637"
          },
          {
            "name": "[oss-security] 20091201 Re: Need more information on recent poppler issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2009/12/01/6"
          },
          {
            "name": "37028",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37028"
          },
          {
            "name": "FEDORA-2010-1377",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html"
          },
          {
            "name": "FEDORA-2009-10823",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://poppler.freedesktop.org/"
          },
          {
            "name": "RHSA-2009:1501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1501.html"
          },
          {
            "name": "37079",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37079"
          },
          {
            "name": "SUSE-SR:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html"
          },
          {
            "name": "DSA-2028",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2028"
          },
          {
            "name": "DSA-2050",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2050"
          },
          {
            "name": "[oss-security] 20091130 Need more information on recent poppler issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2009/12/01/1"
          },
          {
            "name": "37159",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37159"
          },
          {
            "name": "37054",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37054"
          },
          {
            "name": "FEDORA-2010-1805",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html"
          },
          {
            "name": "1021706",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1"
          },
          {
            "name": "FEDORA-2009-10845",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html"
          },
          {
            "name": "RHSA-2009:1512",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1512.html"
          },
          {
            "name": "37114",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37114"
          },
          {
            "name": "37077",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37077"
          },
          {
            "name": "1023029",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1023029"
          },
          {
            "name": "RHSA-2009:1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1503.html"
          },
          {
            "name": "ADV-2009-2926",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2926"
          },
          {
            "name": "MDVSA-2011:175",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
          },
          {
            "name": "37037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37037"
          },
          {
            "name": "USN-850-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-850-3"
          },
          {
            "name": "ADV-2010-0802",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0802"
          },
          {
            "name": "RHSA-2009:1502",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1502.html"
          },
          {
            "name": "FEDORA-2010-1842",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html"
          },
          {
            "name": "xpdf-objectstream-bo(53794)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53794"
          },
          {
            "name": "ADV-2009-2928",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2928"
          },
          {
            "name": "RHSA-2009:1513",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1513.html"
          },
          {
            "name": "37034",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37034"
          },
          {
            "name": "[oss-security] 20091130 Re: Need more information on recent poppler issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2009/12/01/5"
          },
          {
            "name": "ADV-2009-2924",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2924"
          },
          {
            "name": "37051",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37051"
          },
          {
            "name": "274030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1"
          },
          {
            "name": "ADV-2010-1220",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1220"
          },
          {
            "name": "USN-850-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-850-1"
          },
          {
            "name": "37053",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37053"
          },
          {
            "name": "37061",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37061"
          },
          {
            "name": "39327",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39327"
          },
          {
            "name": "37043",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37043"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.ocert.org/advisories/ocert-2009-016.html"
          },
          {
            "name": "oval:org.mitre.oval:def:9536",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9536"
          },
          {
            "name": "36703",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/36703"
          },
          {
            "name": "ADV-2009-2925",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2925"
          },
          {
            "name": "MDVSA-2009:334",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:334"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-10-15T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "39938",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39938"
        },
        {
          "name": "RHSA-2009:1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1504.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch"
        },
        {
          "name": "DSA-1941",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1941"
        },
        {
          "name": "MDVSA-2009:287",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=526637"
        },
        {
          "name": "[oss-security] 20091201 Re: Need more information on recent poppler issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2009/12/01/6"
        },
        {
          "name": "37028",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37028"
        },
        {
          "name": "FEDORA-2010-1377",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html"
        },
        {
          "name": "FEDORA-2009-10823",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://poppler.freedesktop.org/"
        },
        {
          "name": "RHSA-2009:1501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1501.html"
        },
        {
          "name": "37079",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37079"
        },
        {
          "name": "SUSE-SR:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html"
        },
        {
          "name": "DSA-2028",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2028"
        },
        {
          "name": "DSA-2050",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2050"
        },
        {
          "name": "[oss-security] 20091130 Need more information on recent poppler issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2009/12/01/1"
        },
        {
          "name": "37159",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37159"
        },
        {
          "name": "37054",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37054"
        },
        {
          "name": "FEDORA-2010-1805",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html"
        },
        {
          "name": "1021706",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1"
        },
        {
          "name": "FEDORA-2009-10845",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html"
        },
        {
          "name": "RHSA-2009:1512",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1512.html"
        },
        {
          "name": "37114",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37114"
        },
        {
          "name": "37077",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37077"
        },
        {
          "name": "1023029",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1023029"
        },
        {
          "name": "RHSA-2009:1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1503.html"
        },
        {
          "name": "ADV-2009-2926",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2926"
        },
        {
          "name": "MDVSA-2011:175",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
        },
        {
          "name": "37037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37037"
        },
        {
          "name": "USN-850-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-850-3"
        },
        {
          "name": "ADV-2010-0802",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0802"
        },
        {
          "name": "RHSA-2009:1502",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1502.html"
        },
        {
          "name": "FEDORA-2010-1842",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html"
        },
        {
          "name": "xpdf-objectstream-bo(53794)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53794"
        },
        {
          "name": "ADV-2009-2928",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2928"
        },
        {
          "name": "RHSA-2009:1513",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1513.html"
        },
        {
          "name": "37034",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37034"
        },
        {
          "name": "[oss-security] 20091130 Re: Need more information on recent poppler issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2009/12/01/5"
        },
        {
          "name": "ADV-2009-2924",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2924"
        },
        {
          "name": "37051",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37051"
        },
        {
          "name": "274030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1"
        },
        {
          "name": "ADV-2010-1220",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1220"
        },
        {
          "name": "USN-850-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-850-1"
        },
        {
          "name": "37053",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37053"
        },
        {
          "name": "37061",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37061"
        },
        {
          "name": "39327",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39327"
        },
        {
          "name": "37043",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37043"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.ocert.org/advisories/ocert-2009-016.html"
        },
        {
          "name": "oval:org.mitre.oval:def:9536",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9536"
        },
        {
          "name": "36703",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/36703"
        },
        {
          "name": "ADV-2009-2925",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2925"
        },
        {
          "name": "MDVSA-2009:334",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:334"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-3608",
    "datePublished": "2009-10-21T17:00:00",
    "dateReserved": "2009-10-09T00:00:00",
    "dateUpdated": "2024-08-07T06:31:10.520Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-0791

Vulnerability from cvelistv5

Published

2009-06-09 17:00

Modified

2024-08-07 04:48

Severity ?

Summary

Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179.

References

▼	URL	Tags
	http://securitytracker.com/id?1022326	vdb-entry, x_refsource_SECTRACK
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10534	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/35195	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/37028	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35340	third-party-advisory, x_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2009-1501.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/37079	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1488	vdb-entry, x_refsource_VUPEN
	https://rhn.redhat.com/errata/RHSA-2009-1512.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/37077	third-party-advisory, x_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2009-1503.html	vendor-advisory, x_refsource_REDHAT
	https://exchange.xforce.ibmcloud.com/vulnerabilities/50941	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/37037	third-party-advisory, x_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2009-1502.html	vendor-advisory, x_refsource_REDHAT
	https://rhn.redhat.com/errata/RHSA-2009-1500.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/2928	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/37023	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35685	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/37043	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-1083.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:334	vendor-advisory, x_refsource_MANDRIVA
	https://bugzilla.redhat.com/show_bug.cgi?id=491840	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:48:52.062Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1022326",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1022326"
          },
          {
            "name": "oval:org.mitre.oval:def:10534",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10534"
          },
          {
            "name": "35195",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35195"
          },
          {
            "name": "37028",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37028"
          },
          {
            "name": "35340",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35340"
          },
          {
            "name": "RHSA-2009:1501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1501.html"
          },
          {
            "name": "37079",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37079"
          },
          {
            "name": "ADV-2009-1488",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1488"
          },
          {
            "name": "RHSA-2009:1512",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1512.html"
          },
          {
            "name": "37077",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37077"
          },
          {
            "name": "RHSA-2009:1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1503.html"
          },
          {
            "name": "cups-pdftops-filter-bo(50941)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50941"
          },
          {
            "name": "37037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37037"
          },
          {
            "name": "RHSA-2009:1502",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1502.html"
          },
          {
            "name": "RHSA-2009:1500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1500.html"
          },
          {
            "name": "ADV-2009-2928",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2928"
          },
          {
            "name": "37023",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37023"
          },
          {
            "name": "35685",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35685"
          },
          {
            "name": "SUSE-SR:2009:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
          },
          {
            "name": "37043",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37043"
          },
          {
            "name": "RHSA-2009:1083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1083.html"
          },
          {
            "name": "MDVSA-2009:334",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:334"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=491840"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-06-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "1022326",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1022326"
        },
        {
          "name": "oval:org.mitre.oval:def:10534",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10534"
        },
        {
          "name": "35195",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35195"
        },
        {
          "name": "37028",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37028"
        },
        {
          "name": "35340",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35340"
        },
        {
          "name": "RHSA-2009:1501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1501.html"
        },
        {
          "name": "37079",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37079"
        },
        {
          "name": "ADV-2009-1488",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1488"
        },
        {
          "name": "RHSA-2009:1512",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1512.html"
        },
        {
          "name": "37077",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37077"
        },
        {
          "name": "RHSA-2009:1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1503.html"
        },
        {
          "name": "cups-pdftops-filter-bo(50941)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50941"
        },
        {
          "name": "37037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37037"
        },
        {
          "name": "RHSA-2009:1502",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1502.html"
        },
        {
          "name": "RHSA-2009:1500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1500.html"
        },
        {
          "name": "ADV-2009-2928",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2928"
        },
        {
          "name": "37023",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37023"
        },
        {
          "name": "35685",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35685"
        },
        {
          "name": "SUSE-SR:2009:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
        },
        {
          "name": "37043",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37043"
        },
        {
          "name": "RHSA-2009:1083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1083.html"
        },
        {
          "name": "MDVSA-2009:334",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:334"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=491840"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-0791",
    "datePublished": "2009-06-09T17:00:00",
    "dateReserved": "2009-03-04T00:00:00",
    "dateUpdated": "2024-08-07T04:48:52.062Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3604

Vulnerability from cvelistv5

Published

2009-10-21 17:00

Modified

2024-08-07 06:31

Severity ?

Summary

The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.

References

▼	URL	Tags
	http://secunia.com/advisories/39938	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37042	third-party-advisory, x_refsource_SECUNIA
	ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:287	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/37028	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html	vendor-advisory, x_refsource_FEDORA
	http://site.pi3.com.pl/adv/xpdf.txt	x_refsource_MISC
	https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html	vendor-advisory, x_refsource_FEDORA
	https://rhn.redhat.com/errata/RHSA-2009-1501.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/37079	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html	vendor-advisory, x_refsource_SUSE
	https://exchange.xforce.ibmcloud.com/vulnerabilities/53795	vdb-entry, x_refsource_XF
	http://www.debian.org/security/2010/dsa-2028	vendor-advisory, x_refsource_DEBIAN
	http://www.debian.org/security/2010/dsa-2050	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/37159	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html	vendor-advisory, x_refsource_FEDORA
	http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1	vendor-advisory, x_refsource_SUNALERT
	https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html	vendor-advisory, x_refsource_FEDORA
	https://rhn.redhat.com/errata/RHSA-2009-1512.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/37114	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37077	third-party-advisory, x_refsource_SECUNIA
	http://securitytracker.com/id?1023029	vdb-entry, x_refsource_SECTRACK
	https://rhn.redhat.com/errata/RHSA-2009-1503.html	vendor-advisory, x_refsource_REDHAT
	http://cgit.freedesktop.org/poppler/poppler/diff/?id=284a928996&id2=75c3466ba2	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2011:175	vendor-advisory, x_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10969	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/37037	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/1040	vdb-entry, x_refsource_VUPEN
	http://www.ubuntu.com/usn/USN-850-3	vendor-advisory, x_refsource_UBUNTU
	http://www.vupen.com/english/advisories/2010/0802	vdb-entry, x_refsource_VUPEN
	https://rhn.redhat.com/errata/RHSA-2009-1502.html	vendor-advisory, x_refsource_REDHAT
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html	vendor-advisory, x_refsource_FEDORA
	http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb2	x_refsource_CONFIRM
	https://rhn.redhat.com/errata/RHSA-2009-1500.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/2928	vdb-entry, x_refsource_VUPEN
	https://bugzilla.redhat.com/show_bug.cgi?id=526911	x_refsource_CONFIRM
	http://secunia.com/advisories/37023	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/2924	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:087	vendor-advisory, x_refsource_MANDRIVA
	http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1	vendor-advisory, x_refsource_SUNALERT
	http://www.vupen.com/english/advisories/2010/1220	vdb-entry, x_refsource_VUPEN
	http://www.ubuntu.com/usn/USN-850-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/37053	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/39327	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37043	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/36703	vdb-entry, x_refsource_BID

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:31:10.557Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "39938",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39938"
          },
          {
            "name": "37042",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37042"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch"
          },
          {
            "name": "MDVSA-2009:287",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:287"
          },
          {
            "name": "37028",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37028"
          },
          {
            "name": "FEDORA-2010-1377",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://site.pi3.com.pl/adv/xpdf.txt"
          },
          {
            "name": "FEDORA-2009-10823",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html"
          },
          {
            "name": "RHSA-2009:1501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1501.html"
          },
          {
            "name": "37079",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37079"
          },
          {
            "name": "SUSE-SR:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html"
          },
          {
            "name": "xpdf-splashdrawimage-bo(53795)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53795"
          },
          {
            "name": "DSA-2028",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2028"
          },
          {
            "name": "DSA-2050",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2050"
          },
          {
            "name": "37159",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37159"
          },
          {
            "name": "FEDORA-2010-1805",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html"
          },
          {
            "name": "1021706",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1"
          },
          {
            "name": "FEDORA-2009-10845",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html"
          },
          {
            "name": "RHSA-2009:1512",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1512.html"
          },
          {
            "name": "37114",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37114"
          },
          {
            "name": "37077",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37077"
          },
          {
            "name": "1023029",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1023029"
          },
          {
            "name": "RHSA-2009:1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1503.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cgit.freedesktop.org/poppler/poppler/diff/?id=284a928996\u0026id2=75c3466ba2"
          },
          {
            "name": "MDVSA-2011:175",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
          },
          {
            "name": "oval:org.mitre.oval:def:10969",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10969"
          },
          {
            "name": "37037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37037"
          },
          {
            "name": "ADV-2010-1040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1040"
          },
          {
            "name": "USN-850-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-850-3"
          },
          {
            "name": "ADV-2010-0802",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0802"
          },
          {
            "name": "RHSA-2009:1502",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1502.html"
          },
          {
            "name": "FEDORA-2010-1842",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb2"
          },
          {
            "name": "RHSA-2009:1500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1500.html"
          },
          {
            "name": "ADV-2009-2928",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2928"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=526911"
          },
          {
            "name": "37023",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37023"
          },
          {
            "name": "ADV-2009-2924",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2924"
          },
          {
            "name": "MDVSA-2010:087",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
          },
          {
            "name": "274030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1"
          },
          {
            "name": "ADV-2010-1220",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1220"
          },
          {
            "name": "USN-850-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-850-1"
          },
          {
            "name": "37053",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37053"
          },
          {
            "name": "39327",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39327"
          },
          {
            "name": "37043",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37043"
          },
          {
            "name": "36703",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/36703"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-10-15T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "39938",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39938"
        },
        {
          "name": "37042",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37042"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch"
        },
        {
          "name": "MDVSA-2009:287",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:287"
        },
        {
          "name": "37028",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37028"
        },
        {
          "name": "FEDORA-2010-1377",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://site.pi3.com.pl/adv/xpdf.txt"
        },
        {
          "name": "FEDORA-2009-10823",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html"
        },
        {
          "name": "RHSA-2009:1501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1501.html"
        },
        {
          "name": "37079",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37079"
        },
        {
          "name": "SUSE-SR:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html"
        },
        {
          "name": "xpdf-splashdrawimage-bo(53795)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53795"
        },
        {
          "name": "DSA-2028",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2028"
        },
        {
          "name": "DSA-2050",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2050"
        },
        {
          "name": "37159",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37159"
        },
        {
          "name": "FEDORA-2010-1805",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html"
        },
        {
          "name": "1021706",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1"
        },
        {
          "name": "FEDORA-2009-10845",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html"
        },
        {
          "name": "RHSA-2009:1512",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1512.html"
        },
        {
          "name": "37114",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37114"
        },
        {
          "name": "37077",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37077"
        },
        {
          "name": "1023029",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1023029"
        },
        {
          "name": "RHSA-2009:1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1503.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cgit.freedesktop.org/poppler/poppler/diff/?id=284a928996\u0026id2=75c3466ba2"
        },
        {
          "name": "MDVSA-2011:175",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175"
        },
        {
          "name": "oval:org.mitre.oval:def:10969",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10969"
        },
        {
          "name": "37037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37037"
        },
        {
          "name": "ADV-2010-1040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1040"
        },
        {
          "name": "USN-850-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-850-3"
        },
        {
          "name": "ADV-2010-0802",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0802"
        },
        {
          "name": "RHSA-2009:1502",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1502.html"
        },
        {
          "name": "FEDORA-2010-1842",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb2"
        },
        {
          "name": "RHSA-2009:1500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1500.html"
        },
        {
          "name": "ADV-2009-2928",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2928"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=526911"
        },
        {
          "name": "37023",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37023"
        },
        {
          "name": "ADV-2009-2924",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2924"
        },
        {
          "name": "MDVSA-2010:087",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
        },
        {
          "name": "274030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1"
        },
        {
          "name": "ADV-2010-1220",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1220"
        },
        {
          "name": "USN-850-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-850-1"
        },
        {
          "name": "37053",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37053"
        },
        {
          "name": "39327",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39327"
        },
        {
          "name": "37043",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37043"
        },
        {
          "name": "36703",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/36703"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-3604",
    "datePublished": "2009-10-21T17:00:00",
    "dateReserved": "2009-10-09T00:00:00",
    "dateUpdated": "2024-08-07T06:31:10.557Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

rhsa-2009_1503

Vulnerability from csaf_redhat

cve-2009-1188

Vulnerability from cvelistv5

cve-2009-3609

Vulnerability from cvelistv5

cve-2009-3608

Vulnerability from cvelistv5

cve-2009-0791

Vulnerability from cvelistv5

cve-2009-3604

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature