Description
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1790-1 | New xpdf packages fix multiple vulnerabilities |
Debian DSA |
DSA-1793-1 | New kdegraphics packages fix multiple vulnerabilities |
EUVD |
EUVD-2009-0175 | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory. |
Ubuntu USN |
USN-759-1 | poppler vulnerabilities |
Ubuntu USN |
USN-973-1 | KOffice vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T04:24:18.237Z
Reserved: 2009-01-16T00:00:00.000Z
Link: CVE-2009-0166
No data.
Status : Modified
Published: 2009-04-23T17:30:01.610
Modified: 2026-04-23T00:35:47.467
Link: CVE-2009-0166
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD
Ubuntu USN