Unscored severity · published Oct 21, 2009
CVE-2009-3604
The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which…
–
CVSS
8.7%
EPSS
No
On KEV
Description
The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.7% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PO
Poppler · Poppler
0.1; 0.1.1; 0.1.2; 0.2.0; 0.3.0; 0.3.1; +34 more · source: NVD
XP
Xpdf · Foolabs
3.02pl1; 3.02pl2; 3.02pl3 · source: NVD
XP
Xpdfreader · Glyphandcog
2.00; 2.01; 2.02; 2.03; 3.00; 3.01; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3604
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3604
cgit.freedesktop.org
http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb2
cgit.freedesktop.org
http://cgit.freedesktop.org/poppler/poppler/diff/?id=284a928996&id2=75c3466ba2
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html
More from Xpdf
–
CVE-2011-1552
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service…
–
CVE-2011-1554
Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash)…
–
CVE-2011-1553
Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service…
–
CVE-2011-0764
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote…
–
CVE-2010-3704
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly…