← voltar
CVE-2009-3609

CVE-2009-3609

EPSS 4.5%
Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patchhttp://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.htmlhttp://poppler.freedesktop.org/https://bugzilla.redhat.com/show_bug.cgi?id=526893http://secunia.com/advisories/37023http://secunia.com/advisories/37028http://secunia.com/advisories/37034http://secunia.com/advisories/37037http://secunia.com/advisories/37043