Home > Vulnerability Database > CVE-2009-1182

Mend.io Vulnerability Database

CVE-2009-1182

Date: April 23, 2009

Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.

Severity Score

7.3

Related Resources (46)

Url: http://secunia.com/advisories/34852

Url: http://secunia.com/advisories/34755

Url: http://secunia.com/advisories/34756

Url: https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html

Url: http://www.vupen.com/english/advisories/2009/1076

Url: http://www.vupen.com/english/advisories/2009/1077

Url: https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html

Url: http://www.redhat.com/support/errata/RHSA-2009-0429.html

Url: http://secunia.com/advisories/35064

Url: http://secunia.com/advisories/35065

Url: http://www.redhat.com/support/errata/RHSA-2009-0431.html

Url: http://secunia.com/advisories/34991

Url: http://secunia.com/advisories/35685

Url: http://www.securityfocus.com/bid/34568

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2011:175

Url: http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html

Url: http://www.redhat.com/support/errata/RHSA-2009-0480.html

Url: http://secunia.com/advisories/34959

Url: http://www.debian.org/security/2009/dsa-1790

Url: http://rhn.redhat.com/errata/RHSA-2009-0458.html

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2009:101

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10735

Url: http://www.debian.org/security/2009/dsa-1793

Url: https://bugzilla.redhat.com/show_bug.cgi?id=495896

Url: http://secunia.com/advisories/34963

Url: http://www.redhat.com/support/errata/RHSA-2009-0430.html

Url: http://www.vupen.com/english/advisories/2009/1065

Url: http://secunia.com/advisories/34746

Url: http://www.vupen.com/english/advisories/2009/1066

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2010:087

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-1182

Url: http://secunia.com/advisories/35618

Url: http://secunia.com/advisories/34481

Url: http://poppler.freedesktop.org/releases.html

Url: http://www.securitytracker.com/id?1022073

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2009-1182

Url: http://secunia.com/advisories/35037

Url: http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477

Url: http://www.kb.cert.org/vuls/id/196617

Url: http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html

Url: http://secunia.com/advisories/34291

Url: http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html

Url: https://access.redhat.com/security/cve/CVE-2009-1182

Url: http://www.vupen.com/english/advisories/2010/1040

Url: https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html

Url: https://www.mend.io/vulnerability-database/CVE-2009-1182

Severity Score

7.3

Weakness Type (CWE)

Buffer Errors

CWE-119

CVSS v3.1

Base Score:	7.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	7.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2009-1182

Date: April 23, 2009

Severity Score

Related Resources (46)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?