CVEvulnerability

CVE-2009-0800

6.8 MEDIUM Published 2009-04-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-04-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.

Affected configurations

• foolabs xpdf 0.5a • foolabs xpdf 0.7a • foolabs xpdf 0.91a • foolabs xpdf 0.91b • foolabs xpdf 0.91c • foolabs xpdf 0.92a • foolabs xpdf 0.92b • foolabs xpdf 0.92c • foolabs xpdf 0.92d • foolabs xpdf 0.92e • foolabs xpdf 0.93a • foolabs xpdf 0.93b • foolabs xpdf 0.93c • foolabs xpdf 1.00a • glyphandcog xpdfreader (<= 3.02) • glyphandcog xpdfreader 0.2 • glyphandcog xpdfreader 0.3 • glyphandcog xpdfreader 0.4 • glyphandcog xpdfreader 0.5 • glyphandcog xpdfreader 0.6 • glyphandcog xpdfreader 0.7 • glyphandcog xpdfreader 0.80 • glyphandcog xpdfreader 0.90 • glyphandcog xpdfreader 0.91 • glyphandcog xpdfreader 0.92 • glyphandcog xpdfreader 0.93 • glyphandcog xpdfreader 1.00 • glyphandcog xpdfreader 1.01 • glyphandcog xpdfreader 2.00 • glyphandcog xpdfreader 2.01 • glyphandcog xpdfreader 2.02 • glyphandcog xpdfreader 2.03 • glyphandcog xpdfreader 3.00 • glyphandcog xpdfreader 3.01 • poppler poppler (<= 0.10.5) • poppler poppler 0.1 • poppler poppler 0.1.1 • poppler poppler 0.1.2 • poppler poppler 0.2.0 • poppler poppler 0.3.0 • poppler poppler 0.3.1 • poppler poppler 0.3.2 • poppler poppler 0.3.3 • poppler poppler 0.4.0 • poppler poppler 0.4.1 • poppler poppler 0.4.2 • poppler poppler 0.4.3 • poppler poppler 0.4.4 • poppler poppler 0.5.0 • poppler poppler 0.5.1 • poppler poppler 0.5.2 • poppler poppler 0.5.3 • poppler poppler 0.5.4 • poppler poppler 0.5.9 • poppler poppler 0.5.90 • poppler poppler 0.5.91 • poppler poppler 0.6.0 • poppler poppler 0.6.1 • poppler poppler 0.6.2 • poppler poppler 0.6.3 … and 78 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References