CVE-2009-3609

CWE-189CWE-190 — Integer Overflow10 documents8 sources
Severity
4.3MEDIUM
EPSS
6.0%
top 9.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Poppler PopplerFoolabs XpdfGlyphandcog Xpdfreader
Timeline
PublishedOct 21
Latest updateMay 3

Description

Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages5 packages

▶NVDglyphandcog/xpdfreader3.00, 3.01, 3.02+2
▶Debianxpdf< 3.02-2+3
▶Debianpoppler< 0.12.2-1+3
▶NVDpoppler/poppler0.12.0+51
▶NVDfoolabs/xpdf3.02pl1, 3.02pl2, 3.02pl3+2

Patches

Patch: poppler.freedesktop.org ↗Patch: www.securityfocus.com ↗Patch: www.vupen.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-hr5j-672h-fcgc: Integer overflow in the ImageStream::ImageStream function in Stream↗2022-05-03
▶
OSV
CVE-2009-3609: Integer overflow in the ImageStream::ImageStream function in Stream↗2009-10-21
▶
CVEList
CVE-2009-3609: Integer overflow in the ImageStream::ImageStream function in Stream↗2009-10-21
▶

📋Vendor Advisories

5
Ubuntu
KOffice vulnerabilities↗2010-08-17
▶
Ubuntu
poppler vulnerabilities↗2009-11-02
▶
Ubuntu
poppler vulnerabilities↗2009-10-21
▶
Red Hat
xpdf/poppler: ImageStream:: ImageStream integer overflow↗2009-10-14
▶
Debian
CVE-2009-3609: poppler - Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf b...↗2009
▶

💬Community

1
Bugzilla
CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow↗2009-10-02
▶
CVE-2009-3609 (MEDIUM CVSS 4.3) | Integer overflow in the ImageStream | cvebase.io