6.8

CVE-2009-0791

Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Cups Version1.1.17
Apple ≫ Cups Version1.1.22
Apple ≫ Cups Version1.3.7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.54% 0.918
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
http://secunia.com/advisories/35685
http://secunia.com/advisories/37028
http://secunia.com/advisories/37037
http://secunia.com/advisories/37043
http://secunia.com/advisories/37077
http://secunia.com/advisories/37079
http://www.vupen.com/english/advisories/2009/2928
https://rhn.redhat.com/errata/RHSA-2009-1501.html
https://rhn.redhat.com/errata/RHSA-2009-1502.html
https://rhn.redhat.com/errata/RHSA-2009-1503.html
https://rhn.redhat.com/errata/RHSA-2009-1512.html
http://secunia.com/advisories/35340
Vendor Advisory
http://secunia.com/advisories/37023
http://securitytracker.com/id?1022326
http://www.mandriva.com/security/advisories?name=MDVSA-2009:334
http://www.redhat.com/support/errata/RHSA-2009-1083.html
http://www.securityfocus.com/bid/35195
http://www.vupen.com/english/advisories/2009/1488
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=491840
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/50941
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10534
https://rhn.redhat.com/errata/RHSA-2009-1500.html