Home > Vulnerability Database > CVE-2009-0800

Mend.io Vulnerability Database

CVE-2009-0800

Date: April 23, 2009

Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.

Severity Score

5.6

Related Resources (46)

Url: http://secunia.com/advisories/34852

Url: http://secunia.com/advisories/34755

Url: http://secunia.com/advisories/34756

Url: https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html

Url: http://www.vupen.com/english/advisories/2009/1076

Url: http://www.vupen.com/english/advisories/2009/1077

Url: https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html

Url: http://www.redhat.com/support/errata/RHSA-2009-0429.html

Url: https://bugzilla.redhat.com/show_bug.cgi?id=495887

Url: http://secunia.com/advisories/35064

Url: http://secunia.com/advisories/35065

Url: http://www.redhat.com/support/errata/RHSA-2009-0431.html

Url: http://secunia.com/advisories/34991

Url: http://secunia.com/advisories/35685

Url: http://www.securityfocus.com/bid/34568

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-0800

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2011:175

Url: http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html

Url: http://www.redhat.com/support/errata/RHSA-2009-0480.html

Url: http://secunia.com/advisories/34959

Url: https://access.redhat.com/security/cve/CVE-2009-0800

Url: http://www.debian.org/security/2009/dsa-1790

Url: http://rhn.redhat.com/errata/RHSA-2009-0458.html

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2009:101

Url: http://www.debian.org/security/2009/dsa-1793

Url: http://secunia.com/advisories/34963

Url: http://www.redhat.com/support/errata/RHSA-2009-0430.html

Url: http://www.vupen.com/english/advisories/2009/1065

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11323

Url: http://secunia.com/advisories/34746

Url: http://www.vupen.com/english/advisories/2009/1066

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2010:087

Url: http://secunia.com/advisories/35618

Url: http://secunia.com/advisories/34481

Url: http://poppler.freedesktop.org/releases.html

Url: http://www.securitytracker.com/id?1022073

Url: http://secunia.com/advisories/35037

Url: http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477

Url: http://www.kb.cert.org/vuls/id/196617

Url: http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html

Url: http://secunia.com/advisories/34291

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2009-0800

Url: http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html

Url: http://www.vupen.com/english/advisories/2010/1040

Url: https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html

Url: https://www.mend.io/vulnerability-database/CVE-2009-0800

Severity Score

5.6

Weakness Type (CWE)

Input Validation

CWE-20

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	6.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2009-0800

Date: April 23, 2009

Severity Score

Related Resources (46)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?