CVE-2009-1182

PDF JBIG2 MMR decoder buffer overflows

Published Apr 23, 2009 CVSS 2.0 · 7.5 High EPSS 7.3% KEV · Not listed
Description
Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1790-1 New xpdf packages fix multiple vulnerabilities
Debian DSA Debian DSA DSA-1793-1 New kdegraphics packages fix multiple vulnerabilities
EUVD EUVD EUVD-2009-1182 Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.
Ubuntu USN Ubuntu USN USN-759-1 poppler vulnerabilities
References
Link Providers
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html cve-icon cve-icon
http://poppler.freedesktop.org/releases.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2009-0458.html cve-icon cve-icon
http://secunia.com/advisories/34291 cve-icon cve-icon
http://secunia.com/advisories/34481 cve-icon cve-icon
http://secunia.com/advisories/34746 cve-icon cve-icon
http://secunia.com/advisories/34755 cve-icon cve-icon
http://secunia.com/advisories/34756 cve-icon cve-icon
http://secunia.com/advisories/34852 cve-icon cve-icon
http://secunia.com/advisories/34959 cve-icon cve-icon
http://secunia.com/advisories/34963 cve-icon cve-icon
http://secunia.com/advisories/34991 cve-icon cve-icon
http://secunia.com/advisories/35037 cve-icon cve-icon
http://secunia.com/advisories/35064 cve-icon cve-icon
http://secunia.com/advisories/35065 cve-icon cve-icon
http://secunia.com/advisories/35618 cve-icon cve-icon
http://secunia.com/advisories/35685 cve-icon cve-icon
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477 cve-icon cve-icon
http://www.debian.org/security/2009/dsa-1790 cve-icon cve-icon
http://www.debian.org/security/2009/dsa-1793 cve-icon cve-icon
http://www.kb.cert.org/vuls/id/196617 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2009:101 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2010:087 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2011:175 cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2009-0429.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2009-0430.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2009-0431.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2009-0480.html cve-icon cve-icon
http://www.securityfocus.com/bid/34568 cve-icon cve-icon
http://www.securitytracker.com/id?1022073 cve-icon cve-icon
http://www.vupen.com/english/advisories/2009/1065 cve-icon cve-icon
http://www.vupen.com/english/advisories/2009/1066 cve-icon cve-icon
http://www.vupen.com/english/advisories/2009/1076 cve-icon cve-icon
http://www.vupen.com/english/advisories/2009/1077 cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/1040 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=495896 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2009-1182 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10735 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2009-1182 cve-icon
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html cve-icon cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 5:04 AM
Reserved
Mar 31, 2009, 12:00 AM
Status
Modified
Published
Apr 23, 2009, 5:30 PM
Modified
Jun 16, 2026, 11:06 PM
Severity
Important
Public date
Apr 16, 2009, 12:00 AM