NetSight
IP …
medium6.8

CVE-2009-1180

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary c…

Impact

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.

Affected products

VendorProductAffected versions
FoolabsXpdf
Versions 0.5a, 0.7a, 0.91a, 0.91b, 0.91c, 0.92a
GlyphandcogXpdfreader
through 3.02
Versions 0.2, 0.3, 0.4, 0.5, 0.6
PopplerPoppler
through 0.10.5
Versions 0.1, 0.1.1, 0.1.2, 0.2.0, 0.3.0
AppleCups
through 1.3.9
Versions 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4

Weakness classification

CWE-399

References