Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.
References
Configurations
Configuration 1 (hide)
AND |
|
History
13 Feb 2023, 02:20
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Summary | Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read. |
02 Feb 2023, 15:15
Type | Values Removed | Values Added |
---|---|---|
Summary | CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow | |
References |
|
Information
Published : 2009-10-21 17:30
Updated : 2023-12-10 10:51
NVD link : CVE-2009-3609
Mitre link : CVE-2009-3609
CVE.ORG link : CVE-2009-3609
JSON object : View
Products Affected
gnome
- gpdf
foolabs
- xpdf
poppler
- poppler
glyph_and_cog
- pdftops
kde
- kpdf
glyphandcog
- xpdfreader
CWE
CWE-189
Numeric Errors