Description
Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1790-1 | New xpdf packages fix multiple vulnerabilities |
Debian DSA |
DSA-1793-1 | New kdegraphics packages fix multiple vulnerabilities |
EUVD |
EUVD-2009-0156 | Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap. |
Ubuntu USN |
USN-759-1 | poppler vulnerabilities |
Ubuntu USN |
USN-973-1 | KOffice vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T04:24:18.354Z
Reserved: 2009-01-16T00:00:00.000Z
Link: CVE-2009-0147
No data.
Status : Modified
Published: 2009-04-23T17:30:01.563
Modified: 2026-04-23T00:35:47.467
Link: CVE-2009-0147
OpenCVE Enrichment
No data.
Debian DSA
EUVD
Ubuntu USN