CVE-2009-0146
Fixed in a distro release EPSS 3%
Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) JBIG2Stream::readSymbolDictSeg.
Products: foolabs xpdf, glyphandcog xpdfreader, apple cups
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | poppler | 0.10.6-1 |
| Debian 12 | xpdf | 3.02-1.4+lenny1 |
| Debian 13 | poppler | 0.10.6-1 |
| Debian 13 | xpdf | 3.02-1.4+lenny1 |
| Debian 14 | poppler | 0.10.6-1 |
| Debian 14 | xpdf | 3.02-1.4+lenny1 |
| Debian 4.0 | kdegraphics | 4:3.5.5-3etch3 |
| Debian 4.0 | xpdf | 3.01-9.1+etch6 |
| Debian 5.0 | kdegraphics | 4:3.5.9-3+lenny1 |
| Debian 5.0 | xpdf | 3.02-1.4+lenny1 |
| Red Hat Enterprise Linux 3 | xpdf | 1:2.02-14.el3 |
| Red Hat Enterprise Linux 3 | xpdf-debuginfo | 1:2.02-14.el3 |
| Red Hat Enterprise Linux 4 | cups | 1:1.1.22-0.rc1.9.27.el4_7.5 |
| Red Hat Enterprise Linux 4 | cups-debuginfo | 1:1.1.22-0.rc1.9.27.el4_7.5 |
| Red Hat Enterprise Linux 4 | cups-devel | 1:1.1.22-0.rc1.9.27.el4_7.5 |
| Red Hat Enterprise Linux 4 | cups-libs | 1:1.1.22-0.rc1.9.27.el4_7.5 |
| Red Hat Enterprise Linux 4 | gpdf | 0:2.8.2-7.7.2.el4_7.4 |
| Red Hat Enterprise Linux 4 | gpdf-debuginfo | 0:2.8.2-7.7.2.el4_7.4 |
| Red Hat Enterprise Linux 4 | kdegraphics | 7:3.3.1-13.el4 |
| Red Hat Enterprise Linux 4 | kdegraphics-debuginfo | 7:3.3.1-13.el4 |
| Red Hat Enterprise Linux 4 | kdegraphics-devel | 7:3.3.1-13.el4 |
| Red Hat Enterprise Linux 4 | tetex | 0:2.0.2-22.0.1.EL4.16 |
| Red Hat Enterprise Linux 4 | tetex-afm | 0:2.0.2-22.0.1.EL4.16 |
| Red Hat Enterprise Linux 4 | tetex-debuginfo | 0:2.0.2-22.0.1.EL4.16 |
| Red Hat Enterprise Linux 4 | tetex-doc | 0:2.0.2-22.0.1.EL4.16 |
| Red Hat Enterprise Linux 4 | tetex-dvips | 0:2.0.2-22.0.1.EL4.16 |
| Red Hat Enterprise Linux 4 | tetex-fonts | 0:2.0.2-22.0.1.EL4.16 |
| Red Hat Enterprise Linux 4 | tetex-latex | 0:2.0.2-22.0.1.EL4.16 |
| Red Hat Enterprise Linux 4 | tetex-xdvi | 0:2.0.2-22.0.1.EL4.16 |
| Red Hat Enterprise Linux 4 | xpdf | 1:3.00-20.el4 |
| Red Hat Enterprise Linux 4 | xpdf-debuginfo | 1:3.00-20.el4 |
| Red Hat Enterprise Linux 5 | cups | 1:1.3.7-8.el5_3.4 |
| Red Hat Enterprise Linux 5 | cups-debuginfo | 1:1.3.7-8.el5_3.4 |
| Red Hat Enterprise Linux 5 | cups-devel | 1:1.3.7-8.el5_3.4 |
| Red Hat Enterprise Linux 5 | cups-libs | 1:1.3.7-8.el5_3.4 |
| Red Hat Enterprise Linux 5 | cups-lpd | 1:1.3.7-8.el5_3.4 |
| Red Hat Enterprise Linux 5 | kdegraphics | 7:3.5.4-12.el5_3 |
| Red Hat Enterprise Linux 5 | kdegraphics-debuginfo | 7:3.5.4-12.el5_3 |
| Red Hat Enterprise Linux 5 | kdegraphics-devel | 7:3.5.4-12.el5_3 |
| Red Hat Enterprise Linux 5 | poppler | 0:0.5.4-4.4.el5_3.9 |
| Red Hat Enterprise Linux 5 | poppler-debuginfo | 0:0.5.4-4.4.el5_3.9 |
| Red Hat Enterprise Linux 5 | poppler-devel | 0:0.5.4-4.4.el5_3.9 |
| Red Hat Enterprise Linux 5 | poppler-utils | 0:0.5.4-4.4.el5_3.9 |
| Red Hat Enterprise Linux 5 | tetex | 0:3.0-33.8.el5_5.5 |
| Red Hat Enterprise Linux 5 | tetex-afm | 0:3.0-33.8.el5_5.5 |
| Red Hat Enterprise Linux 5 | tetex-debuginfo | 0:3.0-33.8.el5_5.5 |
| Red Hat Enterprise Linux 5 | tetex-doc | 0:3.0-33.8.el5_5.5 |
| Red Hat Enterprise Linux 5 | tetex-dvips | 0:3.0-33.8.el5_5.5 |
| Red Hat Enterprise Linux 5 | tetex-fonts | 0:3.0-33.8.el5_5.5 |
| Red Hat Enterprise Linux 5 | tetex-latex | 0:3.0-33.8.el5_5.5 |
| Red Hat Enterprise Linux 5 | tetex-xdvi | 0:3.0-33.8.el5_5.5 |
| Red Hat rhel productivity 5 | kdegraphics | 7:3.5.4-12.el5_3 |
| Red Hat rhel productivity 5 | kdegraphics-debuginfo | 7:3.5.4-12.el5_3 |
| Red Hat rhel productivity 5 | kdegraphics-devel | 7:3.5.4-12.el5_3 |
| openSUSE Tumbleweed | kdegraphics3 | 3.5.10-1.5 |