NVD

Id
50804  
Name
CVE-2009-3605  
Description
Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, related to (1) glib/poppler-page.cc; (2) ArthurOutputDev.cc, (3) CairoOutputDev.cc, (4) GfxState.cc, (5) JBIG2Stream.cc, (6) PSOutputDev.cc, and (7) SplashOutputDev.cc in poppler/; and (8) SplashBitmap.cc, (9) Splash.cc, and (10) SplashFTFont.cc in splash/. NOTE: this may overlap CVE-2009-0791.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-11-02  
Modified Date
2012-01-18  
Seq
2009-3605  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
257009 50804 CVE-2009-3605 http://cgit.freedesktop.org/poppler/poppler/commit/?id=284a92899602daa4a7f429e61849e794569310b5  View
257010 50804 CVE-2009-3605 http://cgit.freedesktop.org/poppler/poppler/commit/?id=7b2d314a61fd0e12f47c62996cb49ec0d1ba747a  View
257011 50804 CVE-2009-3605 http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb22f812b31858e519411f57747d39bd8  View
257012 50804 CVE-2009-3605 SUSE-SR:2009:018  View
257013 50804 CVE-2009-3605 oval:org.mitre.oval:def:7731  View
257014 50804 CVE-2009-3605 274030  View
257015 50804 CVE-2009-3605 1021706  View
257016 50804 CVE-2009-3605 MDVSA-2009:334  View
257017 50804 CVE-2009-3605 MDVSA-2011:175  View
257018 50804 CVE-2009-3605 USN-850-1  View
257019 50804 CVE-2009-3605 https://bugs.launchpad.net/bugs/cve/2009-3605  View
257020 50804 CVE-2009-3605 https://bugzilla.redhat.com/show_bug.cgi?id=491840  View
257021 50804 CVE-2009-3605 https://launchpad.net/ubuntu/+archive/primary/+files/poppler_0.10.5-1ubuntu2.4.diff.gz  View
257022 50804 CVE-2009-3605 https://launchpad.net/ubuntu/+archive/primary/+files/poppler_0.8.7-1ubuntu0.4.diff.gz  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41508 JVNDB-2009-002515 Poppler における整数オーバーフローの脆弱性 Poppler には、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2009-3605 41036 CVE-2009-3605 50804 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002515.html 2009-11-02 2010-03-15 View