Unscored severity · published Oct 21, 2009
CVE-2009-3608
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and…
–
CVSS
10.2%
EPSS
No
On KEV
Description
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.2% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PO
Poppler · Poppler
through 0.12.0; 0.1; 0.1.1; 0.1.2; 0.2.0; 0.3.0; +34 more · source: NVD
XP
Xpdf · Foolabs
3.02pl1; 3.02pl2; 3.02pl3 · source: NVD
XP
Xpdfreader · Glyphandcog
3.00; 3.01; 3.02 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3608
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3608
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html
Patch
http://poppler.freedesktop.org/
More from Xpdf
–
CVE-2011-1552
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service…
–
CVE-2011-1554
Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash)…
–
CVE-2011-1553
Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service…
–
CVE-2011-0764
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote…
–
CVE-2010-3704
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly…