← volver
CVE-2009-3609

CVE-2009-3609

EPSS 4.5%
Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patchhttp://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.htmlhttp://poppler.freedesktop.org/https://bugzilla.redhat.com/show_bug.cgi?id=526893http://secunia.com/advisories/37023http://secunia.com/advisories/37028http://secunia.com/advisories/37034http://secunia.com/advisories/37037http://secunia.com/advisories/37043