CVE-2009-0146

EPSS 2.83%
Veröffentlicht 23.04.2009 17:30:01
Zuletzt bearbeitet 16.06.2026 23:04:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) JBIG2Stream::readSymbolDictSeg.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 54

NVD 106 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Foolabs ≫ Xpdf Version0.5a

Foolabs ≫ Xpdf Version0.7a

Foolabs ≫ Xpdf Version0.91a

Foolabs ≫ Xpdf Version0.91b

Foolabs ≫ Xpdf Version0.91c

Foolabs ≫ Xpdf Version0.92a

Foolabs ≫ Xpdf Version0.92b

Foolabs ≫ Xpdf Version0.92c

Foolabs ≫ Xpdf Version0.92d

Foolabs ≫ Xpdf Version0.92e

Foolabs ≫ Xpdf Version0.93a

Foolabs ≫ Xpdf Version0.93b

Foolabs ≫ Xpdf Version0.93c

Foolabs ≫ Xpdf Version1.00a

Glyphandcog ≫ Xpdfreader Version <= 3.02

Glyphandcog ≫ Xpdfreader Version0.2

Glyphandcog ≫ Xpdfreader Version0.3

Glyphandcog ≫ Xpdfreader Version0.4

Glyphandcog ≫ Xpdfreader Version0.5

Glyphandcog ≫ Xpdfreader Version0.6

Glyphandcog ≫ Xpdfreader Version0.7

Glyphandcog ≫ Xpdfreader Version0.80

Glyphandcog ≫ Xpdfreader Version0.90

Glyphandcog ≫ Xpdfreader Version0.91

Glyphandcog ≫ Xpdfreader Version0.92

Glyphandcog ≫ Xpdfreader Version0.93

Glyphandcog ≫ Xpdfreader Version1.00

Glyphandcog ≫ Xpdfreader Version1.01

Glyphandcog ≫ Xpdfreader Version2.00

Glyphandcog ≫ Xpdfreader Version2.01

Glyphandcog ≫ Xpdfreader Version2.02

Glyphandcog ≫ Xpdfreader Version2.03

Glyphandcog ≫ Xpdfreader Version3.00

Glyphandcog ≫ Xpdfreader Version3.01

Apple ≫ Cups Version <= 1.3.9

Apple ≫ Cups Version1.1

Apple ≫ Cups Version1.1.1

Apple ≫ Cups Version1.1.2

Apple ≫ Cups Version1.1.3

Apple ≫ Cups Version1.1.4

Apple ≫ Cups Version1.1.5

Apple ≫ Cups Version1.1.5-1

Apple ≫ Cups Version1.1.5-2

Apple ≫ Cups Version1.1.6

Apple ≫ Cups Version1.1.6-1

Apple ≫ Cups Version1.1.6-2

Apple ≫ Cups Version1.1.6-3

Apple ≫ Cups Version1.1.7

Apple ≫ Cups Version1.1.8

Apple ≫ Cups Version1.1.9

Apple ≫ Cups Version1.1.9-1

Apple ≫ Cups Version1.1.10

Apple ≫ Cups Version1.1.10-1

Apple ≫ Cups Version1.1.11

Apple ≫ Cups Version1.1.12

Apple ≫ Cups Version1.1.13

Apple ≫ Cups Version1.1.14

Apple ≫ Cups Version1.1.15

Apple ≫ Cups Version1.1.16

Apple ≫ Cups Version1.1.17

Apple ≫ Cups Version1.1.18

Apple ≫ Cups Version1.1.19

Apple ≫ Cups Version1.1.19 Updaterc1

Apple ≫ Cups Version1.1.19 Updaterc2

Apple ≫ Cups Version1.1.19 Updaterc3

Apple ≫ Cups Version1.1.19 Updaterc4

Apple ≫ Cups Version1.1.19 Updaterc5

Apple ≫ Cups Version1.1.20

Apple ≫ Cups Version1.1.20 Updaterc1

Apple ≫ Cups Version1.1.20 Updaterc2

Apple ≫ Cups Version1.1.20 Updaterc3

Apple ≫ Cups Version1.1.20 Updaterc4

Apple ≫ Cups Version1.1.20 Updaterc5

Apple ≫ Cups Version1.1.20 Updaterc6

Apple ≫ Cups Version1.1.21

Apple ≫ Cups Version1.1.21 Updaterc1

Apple ≫ Cups Version1.1.21 Updaterc2

Apple ≫ Cups Version1.1.22

Apple ≫ Cups Version1.1.22 Updaterc1

Apple ≫ Cups Version1.1.22 Updaterc2

Apple ≫ Cups Version1.1.23

Apple ≫ Cups Version1.1.23 Updaterc1

Apple ≫ Cups Version1.2.0

Apple ≫ Cups Version1.2.1

Apple ≫ Cups Version1.2.2

Apple ≫ Cups Version1.2.3

Apple ≫ Cups Version1.2.4

Apple ≫ Cups Version1.2.5

Apple ≫ Cups Version1.2.6

Apple ≫ Cups Version1.2.7

Apple ≫ Cups Version1.2.8

Apple ≫ Cups Version1.2.9

Apple ≫ Cups Version1.2.10

Apple ≫ Cups Version1.2.11

Apple ≫ Cups Version1.2.12

Apple ≫ Cups Version1.3.0

Apple ≫ Cups Version1.3.1

Apple ≫ Cups Version1.3.2

Apple ≫ Cups Version1.3.3

Apple ≫ Cups Version1.3.4

Apple ≫ Cups Version1.3.5

Apple ≫ Cups Version1.3.6

Apple ≫ Cups Version1.3.7

Apple ≫ Cups Version1.3.8

Apple ≫ Cups Version1.3.10

Apple ≫ Cups Version1.3.11

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.83%	0.848

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

http://secunia.com/advisories/35074

Vendor Advisory

http://support.apple.com/kb/HT3549

http://www.us-cert.gov/cas/techalerts/TA09-133A.html

US Government Resource

http://www.vupen.com/english/advisories/2009/1297

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html

http://secunia.com/advisories/35065

Vendor Advisory

http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

http://support.apple.com/kb/HT3639

http://www.vupen.com/english/advisories/2009/1621

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html

http://secunia.com/advisories/35685

Vendor Advisory

http://wiki.rpath.com/Advisories:rPSA-2009-0059

http://www.securityfocus.com/archive/1/502761/100/0/threaded

http://bugs.gentoo.org/show_bug.cgi?id=263028

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html

http://rhn.redhat.com/errata/RHSA-2009-0458.html

http://secunia.com/advisories/34291

Vendor Advisory

http://secunia.com/advisories/34481

Vendor Advisory

http://secunia.com/advisories/34755

Vendor Advisory

http://secunia.com/advisories/34756

http://secunia.com/advisories/34852

Vendor Advisory

http://secunia.com/advisories/34959

Vendor Advisory

http://secunia.com/advisories/34963

http://secunia.com/advisories/34991

Vendor Advisory

http://secunia.com/advisories/35037

http://secunia.com/advisories/35064

Vendor Advisory

http://secunia.com/advisories/35618

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200904-20.xml

http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477

http://wiki.rpath.com/Advisories:rPSA-2009-0061

http://www.debian.org/security/2009/dsa-1790

http://www.debian.org/security/2009/dsa-1793

http://www.mandriva.com/security/advisories?name=MDVSA-2009:101

http://www.mandriva.com/security/advisories?name=MDVSA-2010:087

http://www.redhat.com/support/errata/RHSA-2009-0429.html

http://www.redhat.com/support/errata/RHSA-2009-0430.html

Patch

http://www.redhat.com/support/errata/RHSA-2009-0431.html

http://www.redhat.com/support/errata/RHSA-2009-0480.html

http://www.securityfocus.com/archive/1/502750/100/0/threaded

http://www.securityfocus.com/bid/34568

http://www.securitytracker.com/id?1022073

http://www.vupen.com/english/advisories/2009/1065

Vendor Advisory

http://www.vupen.com/english/advisories/2009/1066

Vendor Advisory

http://www.vupen.com/english/advisories/2009/1077

Vendor Advisory

http://www.vupen.com/english/advisories/2010/1040

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=490612

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9632

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html

https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html

https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html

https://nvd.nist.gov/vuln/detail/CVE-2009-0146

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-0146

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-0146

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2009-0146