9.3

CVE-2009-3606

Exploit

Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.

Data is provided by the National Vulnerability Database (NVD)
Foolabs ≫ Xpdf Version3.02pl1
   Kde ≫ Kpdf
Foolabs ≫ Xpdf Version3.02pl2
   Kde ≫ Kpdf
Foolabs ≫ Xpdf Version3.02pl3
   Kde ≫ Kpdf
Glyphandcog ≫ Xpdfreader Version3.00
   Kde ≫ Kpdf
Glyphandcog ≫ Xpdfreader Version3.01
   Kde ≫ Kpdf
Glyphandcog ≫ Xpdfreader Version3.02
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.1
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.1.1
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.1.2
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.2.0
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.3.0
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.3.1
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.3.2
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.3.3
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.4.0
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.4.1
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.4.2
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.4.3
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.4.4
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.5.0
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.5.1
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.5.2
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.5.3
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.5.4
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.5.9
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.6.0
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.6.1
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.6.2
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.6.3
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.6.4
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.7.0
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.7.1
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.7.2
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.7.3
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.8.0
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.8.1
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.8.2
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.8.3
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.8.4
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.8.6
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.8.7
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.9.0
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.9.1
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.9.2
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.9.3
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.10.0
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.10.1
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.10.2
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.10.3
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.10.4
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.10.5
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.10.6
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.10.7
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.11.0
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.11.1
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.11.2
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.11.3
   Kde ≫ Kpdf
Poppler ≫ Poppler Version0.12.0
   Kde ≫ Kpdf
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 6.28% 0.899
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C