NetSight
IP …
high7.5

CVE-2009-1182

Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote …

Impact

Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.

Affected products

VendorProductAffected versions
FoolabsXpdf
Versions 0.5a, 0.7a, 0.91a, 0.91b, 0.91c, 0.92a
GlyphandcogXpdfreader
through 3.02
Versions 0.2, 0.3, 0.4, 0.5, 0.6
PopplerPoppler
through 0.10.5
Versions 0.1, 0.1.1, 0.1.2, 0.2.0, 0.3.0
AppleCups
through 1.3.9
Versions 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4

Weakness classification

CWE-119

References