9.3

CVE-2009-3603

Exploit

Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1188.

Data is provided by the National Vulnerability Database (NVD)
Foolabs ≫ Xpdf Version3.02pl1
Foolabs ≫ Xpdf Version3.02pl2
Foolabs ≫ Xpdf Version3.02pl3
Glyphandcog ≫ Xpdfreader Version3.00
Glyphandcog ≫ Xpdfreader Version3.01
Glyphandcog ≫ Xpdfreader Version3.02
Poppler ≫ Poppler Version <= 0.12.0
Poppler ≫ Poppler Version0.1
Poppler ≫ Poppler Version0.1.1
Poppler ≫ Poppler Version0.1.2
Poppler ≫ Poppler Version0.2.0
Poppler ≫ Poppler Version0.3.0
Poppler ≫ Poppler Version0.3.1
Poppler ≫ Poppler Version0.3.2
Poppler ≫ Poppler Version0.3.3
Poppler ≫ Poppler Version0.4.0
Poppler ≫ Poppler Version0.4.1
Poppler ≫ Poppler Version0.4.2
Poppler ≫ Poppler Version0.4.3
Poppler ≫ Poppler Version0.4.4
Poppler ≫ Poppler Version0.5.0
Poppler ≫ Poppler Version0.5.1
Poppler ≫ Poppler Version0.5.2
Poppler ≫ Poppler Version0.5.3
Poppler ≫ Poppler Version0.5.4
Poppler ≫ Poppler Version0.5.9
Poppler ≫ Poppler Version0.6.0
Poppler ≫ Poppler Version0.6.1
Poppler ≫ Poppler Version0.6.2
Poppler ≫ Poppler Version0.6.3
Poppler ≫ Poppler Version0.6.4
Poppler ≫ Poppler Version0.7.0
Poppler ≫ Poppler Version0.7.1
Poppler ≫ Poppler Version0.7.2
Poppler ≫ Poppler Version0.7.3
Poppler ≫ Poppler Version0.8.0
Poppler ≫ Poppler Version0.8.1
Poppler ≫ Poppler Version0.8.2
Poppler ≫ Poppler Version0.8.3
Poppler ≫ Poppler Version0.8.4
Poppler ≫ Poppler Version0.8.6
Poppler ≫ Poppler Version0.8.7
Poppler ≫ Poppler Version0.9.0
Poppler ≫ Poppler Version0.9.1
Poppler ≫ Poppler Version0.9.2
Poppler ≫ Poppler Version0.9.3
Poppler ≫ Poppler Version0.10.0
Poppler ≫ Poppler Version0.10.1
Poppler ≫ Poppler Version0.10.2
Poppler ≫ Poppler Version0.10.3
Poppler ≫ Poppler Version0.10.4
Poppler ≫ Poppler Version0.10.5
Poppler ≫ Poppler Version0.10.6
Poppler ≫ Poppler Version0.10.7
Poppler ≫ Poppler Version0.11.0
Poppler ≫ Poppler Version0.11.1
Poppler ≫ Poppler Version0.11.2
Poppler ≫ Poppler Version0.11.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 6.28% 0.899
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
http://poppler.freedesktop.org/
Patch
Vendor Advisory