CVE-2009-0147

Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.

• foolabs xpdf 0.5a • foolabs xpdf 0.7a • foolabs xpdf 0.91a • foolabs xpdf 0.91b • foolabs xpdf 0.91c • foolabs xpdf 0.92a • foolabs xpdf 0.92b • foolabs xpdf 0.92c • foolabs xpdf 0.92d • foolabs xpdf 0.92e • foolabs xpdf 0.93a • foolabs xpdf 0.93b • foolabs xpdf 0.93c • foolabs xpdf 1.00a • glyphandcog xpdfreader (<= 3.02) • glyphandcog xpdfreader 0.2 • glyphandcog xpdfreader 0.3 • glyphandcog xpdfreader 0.4 • glyphandcog xpdfreader 0.5 • glyphandcog xpdfreader 0.6 • glyphandcog xpdfreader 0.7 • glyphandcog xpdfreader 0.80 • glyphandcog xpdfreader 0.90 • glyphandcog xpdfreader 0.91 • glyphandcog xpdfreader 0.92 • glyphandcog xpdfreader 0.93 • glyphandcog xpdfreader 1.00 • glyphandcog xpdfreader 1.01 • glyphandcog xpdfreader 2.00 • glyphandcog xpdfreader 2.01 • glyphandcog xpdfreader 2.02 • glyphandcog xpdfreader 2.03 • glyphandcog xpdfreader 3.00 • glyphandcog xpdfreader 3.01 • apple cups (<= 1.3.9) • apple cups 1.1 • apple cups 1.1.1 • apple cups 1.1.2 • apple cups 1.1.3 • apple cups 1.1.4 • apple cups 1.1.5 • apple cups 1.1.5-1 • apple cups 1.1.5-2 • apple cups 1.1.6 • apple cups 1.1.6-1 • apple cups 1.1.6-2 • apple cups 1.1.6-3 • apple cups 1.1.7 • apple cups 1.1.8 • apple cups 1.1.9 • apple cups 1.1.9-1 • apple cups 1.1.10 • apple cups 1.1.10-1 • apple cups 1.1.11 • apple cups 1.1.12 • apple cups 1.1.13 • apple cups 1.1.14 • apple cups 1.1.15 • apple cups 1.1.16 • apple cups 1.1.17 … and 30 more