NetSight
IP …
medium6.8

CVE-2009-0800

Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow rem…

Impact

Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.

Affected products

VendorProductAffected versions
FoolabsXpdf
Versions 0.5a, 0.7a, 0.91a, 0.91b, 0.91c, 0.92a
GlyphandcogXpdfreader
through 3.02
Versions 0.2, 0.3, 0.4, 0.5, 0.6
PopplerPoppler
through 0.10.5
Versions 0.1, 0.1.1, 0.1.2, 0.2.0, 0.3.0
AppleCups
through 1.3.9
Versions 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4

Weakness classification

CWE-20

References