CVEvulnerability
CVE-2009-0165
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-04-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to "g*allocn."
Affected configurations
• foolabs xpdf 0.5a
• foolabs xpdf 0.7a
• foolabs xpdf 0.91a
• foolabs xpdf 0.91b
• foolabs xpdf 0.91c
• foolabs xpdf 0.92a
• foolabs xpdf 0.92b
• foolabs xpdf 0.92c
• foolabs xpdf 0.92d
• foolabs xpdf 0.92e
• foolabs xpdf 0.93a
• foolabs xpdf 0.93b
• foolabs xpdf 0.93c
• foolabs xpdf 1.00a
• foolabs xpdf 3.0.1
• glyphandcog xpdfreader (<= 3.02)
• glyphandcog xpdfreader 0.2
• glyphandcog xpdfreader 0.3
• glyphandcog xpdfreader 0.4
• glyphandcog xpdfreader 0.5
• glyphandcog xpdfreader 0.6
• glyphandcog xpdfreader 0.7
• glyphandcog xpdfreader 0.80
• glyphandcog xpdfreader 0.90
• glyphandcog xpdfreader 0.91
• glyphandcog xpdfreader 0.92
• glyphandcog xpdfreader 0.93
• glyphandcog xpdfreader 1.00
• glyphandcog xpdfreader 1.01
• glyphandcog xpdfreader 2.00
• glyphandcog xpdfreader 2.01
• glyphandcog xpdfreader 2.02
• glyphandcog xpdfreader 2.03
• glyphandcog xpdfreader 3.00
• glyphandcog xpdfreader 3.01
Related
Weakness · not in database (1)
References
- http://bugs.gentoo.org/show_bug.cgi?id=263028 Patch
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2009/May/msg00002.html lists.apple.com
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html lists.opensuse.org
- http://secunia.com/advisories/34852 secunia.com
- http://secunia.com/advisories/34959 secunia.com
- http://secunia.com/advisories/34991 secunia.com
- http://secunia.com/advisories/35037 secunia.com
- http://secunia.com/advisories/35065 secunia.com
- http://secunia.com/advisories/35074 secunia.com
- http://secunia.com/advisories/35685 secunia.com
- http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477 slackware.com
- http://support.apple.com/kb/HT3549 support.apple.com
- http://support.apple.com/kb/HT3639 support.apple.com
- http://www.debian.org/security/2009/dsa-1790 www.debian.org
- http://www.debian.org/security/2009/dsa-1793 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:101 www.mandriva.com
- http://www.securityfocus.com/bid/34568 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA09-133A.html US Government Resource
- http://www.vupen.com/english/advisories/2009/1297 www.vupen.com
- http://www.vupen.com/english/advisories/2009/1621 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50377 exchange.xforce.ibmcloud.com
- http://bugs.gentoo.org/show_bug.cgi?id=263028 Patch
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2009/May/msg00002.html lists.apple.com
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html lists.opensuse.org
- http://secunia.com/advisories/34852 secunia.com
- http://secunia.com/advisories/34959 secunia.com
- http://secunia.com/advisories/34991 secunia.com
- http://secunia.com/advisories/35037 secunia.com
- http://secunia.com/advisories/35065 secunia.com
- http://secunia.com/advisories/35074 secunia.com
- http://secunia.com/advisories/35685 secunia.com
- http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477 slackware.com
- http://support.apple.com/kb/HT3549 support.apple.com
- http://support.apple.com/kb/HT3639 support.apple.com
- http://www.debian.org/security/2009/dsa-1790 www.debian.org
- http://www.debian.org/security/2009/dsa-1793 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:101 www.mandriva.com
- http://www.securityfocus.com/bid/34568 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA09-133A.html US Government Resource
- http://www.vupen.com/english/advisories/2009/1297 www.vupen.com
- http://www.vupen.com/english/advisories/2009/1621 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50377 exchange.xforce.ibmcloud.com