Home > Vulnerability Database > CVE-2009-0165

Mend Vulnerability Database

New vulnerability? Tell us about it!

CVE-2009-0165

Good to know:

Date: April 23, 2009

Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to "g*allocn."

Severity Score

6.1

Related Resources (5)

Url: http://secunia.com/advisories/34852

Url: http://bugs.gentoo.org/show_bug.cgi?id=263028

Url: http://www.vupen.com/english/advisories/2009/1297

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-0165

Url: https://www.mend.io/vulnerability-database/CVE-2009-0165

Severity Score

6.1

Weakness Type (CWE)

Numeric Errors

CWE-189

Top Fix

Upgrade Version

CVSS v3.1

Base Score:	6.1
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	CHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	10.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Do you need more information?

Contact Us