NVD

Id
48109  
Name
CVE-2009-0791  
Description
Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-06-09  
Modified Date
2010-08-21  
Seq
2009-0791  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
241548 48109 CVE-2009-0791 SUSE-SR:2009:012  View
241549 48109 CVE-2009-0791 oval:org.mitre.oval:def:10534  View
241550 48109 CVE-2009-0791 1022326  View
241551 48109 CVE-2009-0791 MDVSA-2009:334  View
241552 48109 CVE-2009-0791 RHSA-2009:1083  View
241553 48109 CVE-2009-0791 35195  View
241554 48109 CVE-2009-0791 ADV-2009-1488  View
241555 48109 CVE-2009-0791 ADV-2009-2928  View
241556 48109 CVE-2009-0791 cups-pdftops-filter-bo(50941)  View
241557 48109 CVE-2009-0791 https://bugzilla.redhat.com/show_bug.cgi?id=491840  View
241558 48109 CVE-2009-0791 RHSA-2009:1500  View
241559 48109 CVE-2009-0791 RHSA-2009:1501  View
241560 48109 CVE-2009-0791 RHSA-2009:1502  View
241561 48109 CVE-2009-0791 RHSA-2009:1503  View
241562 48109 CVE-2009-0791 RHSA-2009:1512  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40728 JVNDB-2009-001734 CUPS の pdftops フィルタにおける整数オーバーフローの脆弱性 CUPS の pdftops フィルタには、PDF ファイルの処理に不備があることにより、サービス運用妨害状態 (DoS) にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2009-0791 38222 CVE-2009-0791 48109 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001734.html 2009-06-03 2010-05-26 View