NetSight
IP …
medium4.3

CVE-2009-0166

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a cr…

Impact

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory.

Affected products

VendorProductAffected versions
FoolabsXpdf
Versions 0.5a, 0.7a, 0.91a, 0.91b, 0.91c, 0.92a
GlyphandcogXpdfreader
through 3.02
Versions 0.2, 0.3, 0.4, 0.5, 0.6
PopplerPoppler
through 0.10.5
Versions 0.1, 0.1.1, 0.1.2, 0.2.0, 0.3.0
AppleCups
through 1.3.9
Versions 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4

Weakness classification

CWE-399

References