CVE-2009-4035

The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a crafted Type 1 font that can produce a negative value, leading to a signed-to-unsigned integer conversion error and a buffer overflow.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gnome:gpdf:2.8.2:*:*:*:*:*:*:*
cpe:2.3:a:kde:kdegraphics:3.3.1:*:*:*:*:*:*:*
cpe:2.3:a:kde:kpdf:3.3.1:*:*:*:*:*:*:*
cpe:2.3:a:xpdf:xpdf:3.0.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2009-12-21 21:30

Updated : 2023-12-10 11:03


NVD link : CVE-2009-4035

Mitre link : CVE-2009-4035

CVE.ORG link : CVE-2009-4035


JSON object : View

Products Affected

kde

  • kpdf
  • kdegraphics

gnome

  • gpdf

xpdf

  • xpdf
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')