NVD

Id
50807  
Name
CVE-2009-3608  
Description
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-10-21  
Modified Date
2012-01-18  
Seq
2009-3608  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
257072 50807 CVE-2009-3608 ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch  View
257073 50807 CVE-2009-3608 FEDORA-2010-1805  View
257074 50807 CVE-2009-3608 FEDORA-2010-1842  View
257075 50807 CVE-2009-3608 FEDORA-2010-1377  View
257076 50807 CVE-2009-3608 SUSE-SR:2009:018  View
257077 50807 CVE-2009-3608 oval:org.mitre.oval:def:9536  View
257078 50807 CVE-2009-3608 http://poppler.freedesktop.org/  View
257079 50807 CVE-2009-3608 1023029  View
257080 50807 CVE-2009-3608 274030  View
257081 50807 CVE-2009-3608 1021706  View
257082 50807 CVE-2009-3608 DSA-1941  View
257083 50807 CVE-2009-3608 DSA-2028  View
257084 50807 CVE-2009-3608 DSA-2050  View
257085 50807 CVE-2009-3608 MDVSA-2009:287  View
257086 50807 CVE-2009-3608 MDVSA-2009:334  View
257087 50807 CVE-2009-3608 MDVSA-2011:175  View
257088 50807 CVE-2009-3608 http://www.ocert.org/advisories/ocert-2009-016.html  View
257089 50807 CVE-2009-3608 [oss-security] 20091130 Need more information on recent poppler issues  View
257090 50807 CVE-2009-3608 [oss-security] 20091130 Re: Need more information on recent poppler issues  View
257091 50807 CVE-2009-3608 [oss-security] 20091201 Re: Need more information on recent poppler issues  View
257092 50807 CVE-2009-3608 36703  View
257093 50807 CVE-2009-3608 USN-850-1  View
257094 50807 CVE-2009-3608 USN-850-3  View
257095 50807 CVE-2009-3608 ADV-2009-2924  View
257096 50807 CVE-2009-3608 ADV-2009-2925  View
257097 50807 CVE-2009-3608 ADV-2009-2926  View
257098 50807 CVE-2009-3608 ADV-2009-2928  View
257099 50807 CVE-2009-3608 ADV-2010-0802  View
257100 50807 CVE-2009-3608 ADV-2010-1220  View
257101 50807 CVE-2009-3608 xpdf-objectstream-bo(53794)  View
257102 50807 CVE-2009-3608 https://bugzilla.redhat.com/show_bug.cgi?id=526637  View
257103 50807 CVE-2009-3608 RHSA-2009:1501  View
257104 50807 CVE-2009-3608 RHSA-2009:1502  View
257105 50807 CVE-2009-3608 RHSA-2009:1503  View
257106 50807 CVE-2009-3608 RHSA-2009:1504  View
257107 50807 CVE-2009-3608 RHSA-2009:1512  View
257108 50807 CVE-2009-3608 RHSA-2009:1513  View
257109 50807 CVE-2009-3608 FEDORA-2009-10823  View
257110 50807 CVE-2009-3608 FEDORA-2009-10845  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41255 JVNDB-2009-002262 Xpdf および Poppler の ObjectStream::ObjectStream 関数における整数オーバーフローの脆弱性 Xpdf および Poppler の ObjectStream::ObjectStream 関数には、PDF ドキュメントの処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2009-3608 41039 CVE-2009-3608 50807 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002262.html 2009-10-15 2010-05-26 View