Home > Vulnerability Database > CVE-2009-1179

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2009-1179

Date: April 23, 2009

Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.

Severity Score

5.6

Related Resources (53)

Url: http://secunia.com/advisories/34852

Url: http://www.vupen.com/english/advisories/2009/1076

Url: http://www.vupen.com/english/advisories/2009/1077

Url: http://secunia.com/advisories/35064

Url: http://secunia.com/advisories/35065

Url: http://support.apple.com/kb/HT3613

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2011:175

Url: http://www.debian.org/security/2009/dsa-1790

Url: http://rhn.redhat.com/errata/RHSA-2009-0458.html

Url: http://www.debian.org/security/2009/dsa-1793

Url: https://access.redhat.com/security/cve/CVE-2009-1179

Url: http://secunia.com/advisories/34963

Url: http://www.redhat.com/support/errata/RHSA-2009-0430.html

Url: http://www.vupen.com/english/advisories/2009/1522

Url: http://secunia.com/advisories/35618

Url: http://secunia.com/advisories/34481

Url: http://secunia.com/advisories/35379

Url: http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2009-1179

Url: http://secunia.com/advisories/34291

Url: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

Url: https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html

Url: http://secunia.com/advisories/34755

Url: http://secunia.com/advisories/34756

Url: https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html

Url: https://bugzilla.redhat.com/show_bug.cgi?id=495889

Url: https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html

Url: http://www.redhat.com/support/errata/RHSA-2009-0429.html

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11892

Url: http://www.redhat.com/support/errata/RHSA-2009-0431.html

Url: http://secunia.com/advisories/34991

Url: http://secunia.com/advisories/35685

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-1179

Url: http://www.securityfocus.com/bid/34568

Url: http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html

Url: http://www.redhat.com/support/errata/RHSA-2009-0480.html

Url: http://secunia.com/advisories/34959

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2009:101

Url: http://support.apple.com/kb/HT3639

Url: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html

Url: http://www.vupen.com/english/advisories/2009/1621

Url: http://www.vupen.com/english/advisories/2009/1065

Url: http://secunia.com/advisories/34746

Url: http://www.vupen.com/english/advisories/2009/1066

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2010:087

Url: http://poppler.freedesktop.org/releases.html

Url: http://www.securitytracker.com/id?1022073

Url: http://secunia.com/advisories/35037

Url: http://www.kb.cert.org/vuls/id/196617

Url: http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html

Url: http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html

Url: http://www.vupen.com/english/advisories/2010/1040

Url: https://www.mend.io/vulnerability-database/CVE-2009-1179

Severity Score

5.6

Weakness Type (CWE)

Numeric Errors

CWE-189

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	6.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us