Vulnerability CVE-2009-0147: Information

Description

Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.

Severity: MEDIUM (4.3)

URL: https://nvd.nist.gov/vuln/detail/CVE-2009-0147
Published: April 23, 2009
Modified: March 6, 2019
Error type identifier: CWE-189

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://bugzilla.redhat.com/show_bug.cgi?id=490614
    RHSA-2009:0430
    • Patch
    34755
    • Vendor Advisory
    http://bugs.gentoo.org/show_bug.cgi?id=263028
      SUSE-SA:2009:024
        ADV-2009-1065
        • Vendor Advisory
        34852
        • Vendor Advisory
        http://wiki.rpath.com/Advisories:rPSA-2009-0059
          34481
          • Vendor Advisory
          RHSA-2009:0429
            ADV-2009-1066
            • Vendor Advisory
            1022073
              RHSA-2009:0431
                34291
                • Vendor Advisory
                34568
                  ADV-2009-1077
                  • Vendor Advisory
                  GLSA-200904-20
                    http://wiki.rpath.com/Advisories:rPSA-2009-0061
                      34756
                      • Vendor Advisory
                      MDVSA-2009:101
                        DSA-1790
                          34959
                          • Vendor Advisory
                          RHSA-2009:0458
                            34963
                            • Vendor Advisory
                            35037
                            • Vendor Advisory
                            SSA:2009-129-01
                              35065
                              • Vendor Advisory
                              SUSE-SR:2009:010
                                TA09-133A
                                • US Government Resource
                                RHSA-2009:0480
                                  35074
                                  • Vendor Advisory
                                  APPLE-SA-2009-05-12
                                    http://support.apple.com/kb/HT3549
                                      ADV-2009-1297
                                      • Vendor Advisory
                                      34991
                                      • Vendor Advisory
                                      DSA-1793
                                        35064
                                        • Vendor Advisory
                                        http://support.apple.com/kb/HT3639
                                          ADV-2009-1621
                                          • Vendor Advisory
                                          APPLE-SA-2009-06-17-1
                                            SUSE-SR:2009:012
                                              FEDORA-2009-6973
                                                35618
                                                • Vendor Advisory
                                                FEDORA-2009-6982
                                                  FEDORA-2009-6972
                                                    35685
                                                    • Vendor Advisory
                                                    ADV-2010-1040
                                                    • Vendor Advisory
                                                    MDVSA-2010:087
                                                      oval:org.mitre.oval:def:9941
                                                        20090417 rPSA-2009-0059-1 poppler
                                                          20090417 rPSA-2009-0061-1 cups

                                                              1. Configuration 1

                                                                cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*
                                                                cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*
                                                                cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*
                                                                cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*
                                                                cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*
                                                                cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*
                                                                cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*
                                                                cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*
                                                                cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*
                                                                cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*
                                                                cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*
                                                                cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*
                                                                cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*
                                                                cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*
                                                                cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*
                                                                End including
                                                                3.02

                                                                Configuration 2

                                                                cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*
                                                                End including
                                                                1.3.9
                                                                cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*
                                                                cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*
                                                            VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
                                                            Version: v24.4.2
                                                            Back to top