NVD

Id
51188  
Name
CVE-2009-4035  
Description
The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a crafted Type 1 font that can produce a negative value, leading to a signed-to-unsigned integer conversion error and a buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-12-21  
Modified Date
2010-08-21  
Seq
2009-4035  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
259709 51188 CVE-2009-4035 http://cgit.freedesktop.org/poppler/poppler/diff/fofi/FoFiType1.cc?id=4b4fc5c0  View
259710 51188 CVE-2009-4035 http://cgit.freedesktop.org/poppler/poppler/tree/fofi/FoFiType1.cc?id=4b4fc5c017bf147c9069bbce32fc14467bd2a81a  View
259711 51188 CVE-2009-4035 SUSE-SR:2010:003  View
259712 51188 CVE-2009-4035 oval:org.mitre.oval:def:10996  View
259713 51188 CVE-2009-4035 RHSA-2009:1680  View
259714 51188 CVE-2009-4035 RHSA-2009:1681  View
259715 51188 CVE-2009-4035 RHSA-2009:1682  View
259716 51188 CVE-2009-4035 37350  View
259717 51188 CVE-2009-4035 1023356  View
259718 51188 CVE-2009-4035 ADV-2009-3555  View
259719 51188 CVE-2009-4035 xpdf-fofitype1parse-bo(54831)  View
259720 51188 CVE-2009-4035 https://bugzilla.redhat.com/show_bug.cgi?id=541614  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41458 JVNDB-2009-002465 Xpdf、gpdf および kpdf の FoFiType1::parse 関数における任意のコードを実行される脆弱性 Xpdf、gpdf および kpdf の FoFiType1::parse 関数には、getNextLine 関数の戻り値をチェックしないため、任意のコードを実行される脆弱性が存在します。 CVE-2009-4035 41466 CVE-2009-4035 51188 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002465.html 2009-12-16 2010-01-29 View