CVE-2009-0166

xpdf: Freeing of potentially uninitialized memory in JBIG2 decoder

Published Apr 23, 2009 CVSS 2.0 · 4.3 Medium EPSS 2.3% KEV · Not listed
Description
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1790-1 New xpdf packages fix multiple vulnerabilities
Debian DSA Debian DSA DSA-1793-1 New kdegraphics packages fix multiple vulnerabilities
EUVD EUVD EUVD-2009-0175 The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory.
Ubuntu USN Ubuntu USN USN-759-1 poppler vulnerabilities
Ubuntu USN Ubuntu USN USN-973-1 KOffice vulnerabilities
References
Link Providers
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2009-0458.html cve-icon cve-icon
http://secunia.com/advisories/34291 cve-icon cve-icon
http://secunia.com/advisories/34481 cve-icon cve-icon
http://secunia.com/advisories/34755 cve-icon cve-icon
http://secunia.com/advisories/34756 cve-icon cve-icon
http://secunia.com/advisories/34852 cve-icon cve-icon
http://secunia.com/advisories/34959 cve-icon cve-icon
http://secunia.com/advisories/34963 cve-icon cve-icon
http://secunia.com/advisories/34991 cve-icon cve-icon
http://secunia.com/advisories/35037 cve-icon cve-icon
http://secunia.com/advisories/35064 cve-icon cve-icon
http://secunia.com/advisories/35065 cve-icon cve-icon
http://secunia.com/advisories/35618 cve-icon cve-icon
http://secunia.com/advisories/35685 cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200904-20.xml cve-icon cve-icon
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477 cve-icon cve-icon
http://wiki.rpath.com/Advisories:rPSA-2009-0061 cve-icon cve-icon
http://www.debian.org/security/2009/dsa-1790 cve-icon cve-icon
http://www.debian.org/security/2009/dsa-1793 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2009:101 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2010:087 cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2009-0429.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2009-0430.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2009-0431.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2009-0480.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/502750/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/34568 cve-icon cve-icon
http://www.securitytracker.com/id?1022073 cve-icon cve-icon
http://www.vupen.com/english/advisories/2009/1065 cve-icon cve-icon
http://www.vupen.com/english/advisories/2009/1066 cve-icon cve-icon
http://www.vupen.com/english/advisories/2009/1077 cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/1040 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=490625 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2009-0166 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9778 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2009-0166 cve-icon
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html cve-icon cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 4:24 AM
Reserved
Jan 16, 2009, 12:00 AM
Status
Modified
Published
Apr 23, 2009, 5:30 PM
Modified
Jun 16, 2026, 11:04 PM
Severity
Low
Public date
Apr 16, 2009, 12:00 AM