QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2009-3605

Back to search

CVE-2009-3605

Published: Nov 2, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, related to (1) glib/poppler-page.cc; (2) ArthurOutputDev.cc, (3) CairoOutputDev.cc, (4) GfxState.cc, (5) JBIG2Stream.cc, (6) PSOutputDev.cc, and (7) SplashOutputDev.cc in poppler/; and (8) SplashBitmap.cc, (9) Splash.cc, and (10) SplashFTFont.cc in splash/. NOTE: this may overlap CVE-2009-0791.

VendorProductVersions

n/a

n/a

affected
n/a

References

SUSE-SR:2009:018
vendor-advisory
x_refsource_SUSE
1021706
vendor-advisory
x_refsource_SUNALERT
37114
third-party-advisory
x_refsource_SECUNIA
MDVSA-2011:175
vendor-advisory
x_refsource_MANDRIVA
oval:org.mitre.oval:def:7731
vdb-entry
signature
x_refsource_OVAL
274030
vendor-advisory
x_refsource_SUNALERT
USN-850-1
vendor-advisory
x_refsource_UBUNTU
MDVSA-2009:334
vendor-advisory
x_refsource_MANDRIVA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now