CVEvulnerability

CVE-2009-1180

6.8 MEDIUM Published 2009-04-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-04-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-399

Description

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.

Affected configurations

• foolabs xpdf 0.5a • foolabs xpdf 0.7a • foolabs xpdf 0.91a • foolabs xpdf 0.91b • foolabs xpdf 0.91c • foolabs xpdf 0.92a • foolabs xpdf 0.92b • foolabs xpdf 0.92c • foolabs xpdf 0.92d • foolabs xpdf 0.92e • foolabs xpdf 0.93a • foolabs xpdf 0.93b • foolabs xpdf 0.93c • foolabs xpdf 1.00a • glyphandcog xpdfreader (<= 3.02) • glyphandcog xpdfreader 0.2 • glyphandcog xpdfreader 0.3 • glyphandcog xpdfreader 0.4 • glyphandcog xpdfreader 0.5 • glyphandcog xpdfreader 0.6 • glyphandcog xpdfreader 0.7 • glyphandcog xpdfreader 0.80 • glyphandcog xpdfreader 0.90 • glyphandcog xpdfreader 0.91 • glyphandcog xpdfreader 0.92 • glyphandcog xpdfreader 0.93 • glyphandcog xpdfreader 1.00 • glyphandcog xpdfreader 1.01 • glyphandcog xpdfreader 2.00 • glyphandcog xpdfreader 2.01 • glyphandcog xpdfreader 2.02 • glyphandcog xpdfreader 2.03 • glyphandcog xpdfreader 3.00 • glyphandcog xpdfreader 3.01 • poppler poppler (<= 0.10.5) • poppler poppler 0.1 • poppler poppler 0.1.1 • poppler poppler 0.1.2 • poppler poppler 0.2.0 • poppler poppler 0.3.0 • poppler poppler 0.3.1 • poppler poppler 0.3.2 • poppler poppler 0.3.3 • poppler poppler 0.4.0 • poppler poppler 0.4.1 • poppler poppler 0.4.2 • poppler poppler 0.4.3 • poppler poppler 0.4.4 • poppler poppler 0.5.0 • poppler poppler 0.5.1 • poppler poppler 0.5.2 • poppler poppler 0.5.3 • poppler poppler 0.5.4 • poppler poppler 0.5.9 • poppler poppler 0.5.90 • poppler poppler 0.5.91 • poppler poppler 0.6.0 • poppler poppler 0.6.1 • poppler poppler 0.6.2 • poppler poppler 0.6.3 … and 78 more

Related

Weakness · not in database (1)

References