CVEvulnerability

CVE-2009-0195

6.8 MEDIUM Published 2009-04-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-04-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.

Affected configurations

• apple cups 1.3.9 • foolabs xpdf 0.5a • foolabs xpdf 0.7a • foolabs xpdf 0.91a • foolabs xpdf 0.91b • foolabs xpdf 0.91c • foolabs xpdf 0.92a • foolabs xpdf 0.92b • foolabs xpdf 0.92c • foolabs xpdf 0.92d • foolabs xpdf 0.92e • foolabs xpdf 0.93a • foolabs xpdf 0.93b • foolabs xpdf 0.93c • foolabs xpdf 1.00a • foolabs xpdf 3.0.1 • glyphandcog xpdfreader (<= 3.02) • glyphandcog xpdfreader 0.2 • glyphandcog xpdfreader 0.3 • glyphandcog xpdfreader 0.4 • glyphandcog xpdfreader 0.5 • glyphandcog xpdfreader 0.6 • glyphandcog xpdfreader 0.7 • glyphandcog xpdfreader 0.80 • glyphandcog xpdfreader 0.90 • glyphandcog xpdfreader 0.91 • glyphandcog xpdfreader 0.92 • glyphandcog xpdfreader 0.93 • glyphandcog xpdfreader 1.00 • glyphandcog xpdfreader 1.01 • glyphandcog xpdfreader 2.00 • glyphandcog xpdfreader 2.01 • glyphandcog xpdfreader 2.02 • glyphandcog xpdfreader 2.03 • glyphandcog xpdfreader 3.00

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References