NVD

Id
50803  
Name
CVE-2009-3604  
Description
The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-10-21  
Modified Date
2012-01-18  
Seq
2009-3604  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
256975 50803 CVE-2009-3604 ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch  View
256976 50803 CVE-2009-3604 http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb2  View
256977 50803 CVE-2009-3604 http://cgit.freedesktop.org/poppler/poppler/diff/?id=284a928996&id2=75c3466ba2  View
256978 50803 CVE-2009-3604 FEDORA-2010-1805  View
256979 50803 CVE-2009-3604 FEDORA-2010-1842  View
256980 50803 CVE-2009-3604 FEDORA-2010-1377  View
256981 50803 CVE-2009-3604 SUSE-SR:2009:018  View
256982 50803 CVE-2009-3604 oval:org.mitre.oval:def:10969  View
256983 50803 CVE-2009-3604 1023029  View
256984 50803 CVE-2009-3604 http://site.pi3.com.pl/adv/xpdf.txt  View
256985 50803 CVE-2009-3604 274030  View
256986 50803 CVE-2009-3604 1021706  View
256987 50803 CVE-2009-3604 DSA-2028  View
256988 50803 CVE-2009-3604 DSA-2050  View
256989 50803 CVE-2009-3604 MDVSA-2009:287  View
256990 50803 CVE-2009-3604 MDVSA-2010:087  View
256991 50803 CVE-2009-3604 MDVSA-2011:175  View
256992 50803 CVE-2009-3604 36703  View
256993 50803 CVE-2009-3604 USN-850-1  View
256994 50803 CVE-2009-3604 USN-850-3  View
256995 50803 CVE-2009-3604 ADV-2009-2924  View
256996 50803 CVE-2009-3604 ADV-2009-2928  View
256997 50803 CVE-2009-3604 ADV-2010-0802  View
256998 50803 CVE-2009-3604 ADV-2010-1040  View
256999 50803 CVE-2009-3604 ADV-2010-1220  View
257000 50803 CVE-2009-3604 xpdf-splashdrawimage-bo(53795)  View
257001 50803 CVE-2009-3604 https://bugzilla.redhat.com/show_bug.cgi?id=526911  View
257002 50803 CVE-2009-3604 RHSA-2009:1500  View
257003 50803 CVE-2009-3604 RHSA-2009:1501  View
257004 50803 CVE-2009-3604 RHSA-2009:1502  View
257005 50803 CVE-2009-3604 RHSA-2009:1503  View
257006 50803 CVE-2009-3604 RHSA-2009:1512  View
257007 50803 CVE-2009-3604 FEDORA-2009-10823  View
257008 50803 CVE-2009-3604 FEDORA-2009-10845  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41253 JVNDB-2009-002260 Xpdf および Poppler の Splash::drawImage 関数における任意のコードを実行される脆弱性 Xpdf および Poppler の Splash::drawImage 関数には、メモリ割り当てを適切に行わないため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2009-3604 41035 CVE-2009-3604 50803 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002260.html 2009-10-15 2009-11-25 View