CVE-2009-0146

EPSS 2.83%
Veröffentlicht 23.04.2009 17:30:01
Zuletzt bearbeitet 16.06.2026 23:04:21
Erkennungen
Login

Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) JBIG2Stream::readSymbolDictSeg.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 54

NVD 106 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Foolabs ≫ Xpdf Version 0.5a

Foolabs ≫ Xpdf Version 0.7a

Foolabs ≫ Xpdf Version 0.91a

Foolabs ≫ Xpdf Version 0.91b

Foolabs ≫ Xpdf Version 0.91c

Foolabs ≫ Xpdf Version 0.92a

Foolabs ≫ Xpdf Version 0.92b

Foolabs ≫ Xpdf Version 0.92c

Foolabs ≫ Xpdf Version 0.92d

Foolabs ≫ Xpdf Version 0.92e

Foolabs ≫ Xpdf Version 0.93a

Foolabs ≫ Xpdf Version 0.93b

Foolabs ≫ Xpdf Version 0.93c

Foolabs ≫ Xpdf Version 1.00a

Glyphandcog ≫ Xpdfreader Version <= 3.02

Glyphandcog ≫ Xpdfreader Version 0.2

Glyphandcog ≫ Xpdfreader Version 0.3

Glyphandcog ≫ Xpdfreader Version 0.4

Glyphandcog ≫ Xpdfreader Version 0.5

Glyphandcog ≫ Xpdfreader Version 0.6

Glyphandcog ≫ Xpdfreader Version 0.7

Glyphandcog ≫ Xpdfreader Version 0.80

Glyphandcog ≫ Xpdfreader Version 0.90

Glyphandcog ≫ Xpdfreader Version 0.91

Glyphandcog ≫ Xpdfreader Version 0.92

Glyphandcog ≫ Xpdfreader Version 0.93

Glyphandcog ≫ Xpdfreader Version 1.00

Glyphandcog ≫ Xpdfreader Version 1.01

Glyphandcog ≫ Xpdfreader Version 2.00

Glyphandcog ≫ Xpdfreader Version 2.01

Glyphandcog ≫ Xpdfreader Version 2.02

Glyphandcog ≫ Xpdfreader Version 2.03

Glyphandcog ≫ Xpdfreader Version 3.00

Glyphandcog ≫ Xpdfreader Version 3.01

Apple ≫ Cups Version <= 1.3.9

Apple ≫ Cups Version 1.1

Apple ≫ Cups Version 1.1.1

Apple ≫ Cups Version 1.1.2

Apple ≫ Cups Version 1.1.3

Apple ≫ Cups Version 1.1.4

Apple ≫ Cups Version 1.1.5

Apple ≫ Cups Version 1.1.5-1

Apple ≫ Cups Version 1.1.5-2

Apple ≫ Cups Version 1.1.6

Apple ≫ Cups Version 1.1.6-1

Apple ≫ Cups Version 1.1.6-2

Apple ≫ Cups Version 1.1.6-3

Apple ≫ Cups Version 1.1.7

Apple ≫ Cups Version 1.1.8

Apple ≫ Cups Version 1.1.9

Apple ≫ Cups Version 1.1.9-1

Apple ≫ Cups Version 1.1.10

Apple ≫ Cups Version 1.1.10-1

Apple ≫ Cups Version 1.1.11

Apple ≫ Cups Version 1.1.12

Apple ≫ Cups Version 1.1.13

Apple ≫ Cups Version 1.1.14

Apple ≫ Cups Version 1.1.15

Apple ≫ Cups Version 1.1.16

Apple ≫ Cups Version 1.1.17

Apple ≫ Cups Version 1.1.18

Apple ≫ Cups Version 1.1.19

Apple ≫ Cups Version 1.1.19 Update rc1

Apple ≫ Cups Version 1.1.19 Update rc2

Apple ≫ Cups Version 1.1.19 Update rc3

Apple ≫ Cups Version 1.1.19 Update rc4

Apple ≫ Cups Version 1.1.19 Update rc5

Apple ≫ Cups Version 1.1.20

Apple ≫ Cups Version 1.1.20 Update rc1

Apple ≫ Cups Version 1.1.20 Update rc2

Apple ≫ Cups Version 1.1.20 Update rc3

Apple ≫ Cups Version 1.1.20 Update rc4

Apple ≫ Cups Version 1.1.20 Update rc5

Apple ≫ Cups Version 1.1.20 Update rc6

Apple ≫ Cups Version 1.1.21

Apple ≫ Cups Version 1.1.21 Update rc1

Apple ≫ Cups Version 1.1.21 Update rc2

Apple ≫ Cups Version 1.1.22

Apple ≫ Cups Version 1.1.22 Update rc1

Apple ≫ Cups Version 1.1.22 Update rc2

Apple ≫ Cups Version 1.1.23

Apple ≫ Cups Version 1.1.23 Update rc1

Apple ≫ Cups Version 1.2.0

Apple ≫ Cups Version 1.2.1

Apple ≫ Cups Version 1.2.2

Apple ≫ Cups Version 1.2.3

Apple ≫ Cups Version 1.2.4

Apple ≫ Cups Version 1.2.5

Apple ≫ Cups Version 1.2.6

Apple ≫ Cups Version 1.2.7

Apple ≫ Cups Version 1.2.8

Apple ≫ Cups Version 1.2.9

Apple ≫ Cups Version 1.2.10

Apple ≫ Cups Version 1.2.11

Apple ≫ Cups Version 1.2.12

Apple ≫ Cups Version 1.3.0

Apple ≫ Cups Version 1.3.1

Apple ≫ Cups Version 1.3.2

Apple ≫ Cups Version 1.3.3

Apple ≫ Cups Version 1.3.4

Apple ≫ Cups Version 1.3.5

Apple ≫ Cups Version 1.3.6

Apple ≫ Cups Version 1.3.7

Apple ≫ Cups Version 1.3.8

Apple ≫ Cups Version 1.3.10

Apple ≫ Cups Version 1.3.11

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.83%	0.848

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

http://secunia.com/advisories/35074

Vendor Advisory

http://support.apple.com/kb/HT3549

http://www.us-cert.gov/cas/techalerts/TA09-133A.html

US Government Resource

http://www.vupen.com/english/advisories/2009/1297

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html

http://secunia.com/advisories/35065

Vendor Advisory

http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

http://support.apple.com/kb/HT3639

http://www.vupen.com/english/advisories/2009/1621

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html

http://secunia.com/advisories/35685

Vendor Advisory

http://wiki.rpath.com/Advisories:rPSA-2009-0059

http://www.securityfocus.com/archive/1/502761/100/0/threaded

http://bugs.gentoo.org/show_bug.cgi?id=263028

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html

http://rhn.redhat.com/errata/RHSA-2009-0458.html

http://secunia.com/advisories/34291

Vendor Advisory

http://secunia.com/advisories/34481

Vendor Advisory

http://secunia.com/advisories/34755

Vendor Advisory

http://secunia.com/advisories/34756

http://secunia.com/advisories/34852

Vendor Advisory

http://secunia.com/advisories/34959

Vendor Advisory

http://secunia.com/advisories/34963

http://secunia.com/advisories/34991

Vendor Advisory

http://secunia.com/advisories/35037

http://secunia.com/advisories/35064

Vendor Advisory

http://secunia.com/advisories/35618

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200904-20.xml

http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477

http://wiki.rpath.com/Advisories:rPSA-2009-0061

http://www.debian.org/security/2009/dsa-1790

http://www.debian.org/security/2009/dsa-1793

http://www.mandriva.com/security/advisories?name=MDVSA-2009:101

http://www.mandriva.com/security/advisories?name=MDVSA-2010:087

http://www.redhat.com/support/errata/RHSA-2009-0429.html

http://www.redhat.com/support/errata/RHSA-2009-0430.html

Patch

http://www.redhat.com/support/errata/RHSA-2009-0431.html

http://www.redhat.com/support/errata/RHSA-2009-0480.html

http://www.securityfocus.com/archive/1/502750/100/0/threaded

http://www.securityfocus.com/bid/34568

http://www.securitytracker.com/id?1022073

http://www.vupen.com/english/advisories/2009/1065

Vendor Advisory

http://www.vupen.com/english/advisories/2009/1066

Vendor Advisory

http://www.vupen.com/english/advisories/2009/1077

Vendor Advisory

http://www.vupen.com/english/advisories/2010/1040

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=490612

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9632

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html

https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html

https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html

https://nvd.nist.gov/vuln/detail/CVE-2009-0146

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-0146

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-0146

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2009-0146