VulnerabilityModified
CVE-2009-1179
Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.
MEDIUM 6.8EPSS 5.55%
Does this matter?
Lower severity and a low EPSS score (5.55%). Track it; it rarely justifies an emergency change on its own.
Description
Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 5.55% probability · 92th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-189
- Affected
- foolabs/xpdf · glyphandcog/xpdfreader · poppler/poppler · apple/cups
- Source
- secalert@redhat.com
References
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
- http://poppler.freedesktop.org/releases.html
- http://rhn.redhat.com/errata/RHSA-2009-0458.html
- http://secunia.com/advisories/34291Vendor Advisory
- http://secunia.com/advisories/34481Vendor Advisory
- http://secunia.com/advisories/34746Vendor Advisory
- http://secunia.com/advisories/34755Vendor Advisory
- http://secunia.com/advisories/34756Vendor Advisory
- http://secunia.com/advisories/34852Vendor Advisory
- http://secunia.com/advisories/34959Vendor Advisory
- http://secunia.com/advisories/34963Vendor Advisory
- http://secunia.com/advisories/34991Vendor Advisory
- http://secunia.com/advisories/35037Vendor Advisory
- http://secunia.com/advisories/35064Vendor Advisory
- http://secunia.com/advisories/35065Vendor Advisory
- http://secunia.com/advisories/35379Vendor Advisory
- http://secunia.com/advisories/35618Vendor Advisory
- http://secunia.com/advisories/35685Vendor Advisory
- http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477
- http://support.apple.com/kb/HT3613
- http://support.apple.com/kb/HT3639
- http://www.debian.org/security/2009/dsa-1790
- http://www.debian.org/security/2009/dsa-1793
- http://www.kb.cert.org/vuls/id/196617US Government Resource
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:101
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:087
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.