CVE-2009-3608
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 10.2%, higher than 95% of all known CVEs. Patch or mitigate before the next change window.
Description
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 10.23% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-189
- Affected
- foolabs/xpdf · glyphandcog/xpdfreader · poppler/poppler
- Source
- secalert@redhat.com
References
- ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patchPatch
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html
- http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html
- http://poppler.freedesktop.org/Patch, Vendor Advisory
- http://secunia.com/advisories/37028Vendor Advisory
- http://secunia.com/advisories/37034Vendor Advisory
- http://secunia.com/advisories/37037Vendor Advisory
- http://secunia.com/advisories/37043Vendor Advisory
- http://secunia.com/advisories/37051Vendor Advisory
- http://secunia.com/advisories/37053Vendor Advisory
- http://secunia.com/advisories/37054Vendor Advisory
- http://secunia.com/advisories/37061Vendor Advisory
- http://secunia.com/advisories/37077Vendor Advisory
- http://secunia.com/advisories/37079Vendor Advisory
- http://secunia.com/advisories/37114
- http://secunia.com/advisories/37159
- http://secunia.com/advisories/39327
- http://secunia.com/advisories/39938
- http://securitytracker.com/id?1023029Patch
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1
- http://www.debian.org/security/2009/dsa-1941
- http://www.debian.org/security/2010/dsa-2028
- http://www.debian.org/security/2010/dsa-2050
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:287
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:334
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:175
- http://www.ocert.org/advisories/ocert-2009-016.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.