Unscored severity · published Apr 23, 2009
CVE-2009-0165
Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to "g*allocn."
–
CVSS
3.6%
EPSS
No
On KEV
Exploitation
Is it being used?
Exploit prediction (EPSS)3.6% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XP
Xpdf · Foolabs
0.5a; 0.7a; 0.91a; 0.91b; 0.91c; 0.92a; +9 more · source: NVD
XP
Xpdfreader · Glyphandcog
through 3.02; 0.2; 0.3; 0.4; 0.5; 0.6; +14 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0165
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0165
Patch
http://bugs.gentoo.org/show_bug.cgi?id=263028
lists.apple.com
http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
lists.apple.com
http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
More from Xpdf
–
CVE-2011-1552
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service…
–
CVE-2011-1554
Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash)…
–
CVE-2011-1553
Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service…
–
CVE-2011-0764
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote…
–
CVE-2010-3704
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly…