CVE-2009-0165

Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to "g*allocn."

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2009-04-23

Last modified

2024-08-07

Weaknesses

CWE-189

Affected products

• Xpdf (Foolabs)
• Xpdfreader (Glyphandcog)

References

• http://bugs.gentoo.org/show_bug.cgi?id=263028
• http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
• http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html
• http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
• http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
• http://secunia.com/advisories/34852
• http://secunia.com/advisories/34959
• http://secunia.com/advisories/34991
• http://secunia.com/advisories/35037
• http://secunia.com/advisories/35065
• http://secunia.com/advisories/35074
• http://secunia.com/advisories/35685
• http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477
• http://support.apple.com/kb/HT3549
• http://support.apple.com/kb/HT3639
• http://www.debian.org/security/2009/dsa-1790
• http://www.debian.org/security/2009/dsa-1793
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:101
• http://www.securityfocus.com/bid/34568
• http://www.us-cert.gov/cas/techalerts/TA09-133A.html
• http://www.vupen.com/english/advisories/2009/1297
• http://www.vupen.com/english/advisories/2009/1621
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50377