CVE-2009-1179

Sažetak

Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.

Reference

https://bugzilla.redhat.com/show_bug.cgi?id=495889
http://www.redhat.com/support/errata/RHSA-2009-0430.html
http://secunia.com/advisories/34755
http://www.vupen.com/english/advisories/2009/1066
http://secunia.com/advisories/34852
http://secunia.com/advisories/34746
http://www.vupen.com/english/advisories/2009/1076
http://secunia.com/advisories/34481
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html
http://www.vupen.com/english/advisories/2009/1065
http://poppler.freedesktop.org/releases.html
http://www.redhat.com/support/errata/RHSA-2009-0431.html
http://www.redhat.com/support/errata/RHSA-2009-0429.html
http://secunia.com/advisories/34291
http://www.securitytracker.com/id?1022073
http://www.securityfocus.com/bid/34568
http://www.vupen.com/english/advisories/2009/1077
http://secunia.com/advisories/34756
http://www.kb.cert.org/vuls/id/196617
http://www.mandriva.com/security/advisories?name=MDVSA-2009:101
http://www.debian.org/security/2009/dsa-1790
http://secunia.com/advisories/34959
http://rhn.redhat.com/errata/RHSA-2009-0458.html
http://secunia.com/advisories/34963
http://secunia.com/advisories/35037
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
http://secunia.com/advisories/35065
http://www.redhat.com/support/errata/RHSA-2009-0480.html
http://www.debian.org/security/2009/dsa-1793
http://secunia.com/advisories/34991
http://secunia.com/advisories/35064
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
http://secunia.com/advisories/35379
http://www.vupen.com/english/advisories/2009/1522
http://support.apple.com/kb/HT3613
http://www.vupen.com/english/advisories/2009/1621
http://support.apple.com/kb/HT3639
http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
http://secunia.com/advisories/35618
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html
http://secunia.com/advisories/35685
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html
http://www.vupen.com/english/advisories/2010/1040
http://www.mandriva.com/security/advisories?name=MDVSA-2010:087
http://www.mandriva.com/security/advisories?name=MDVSA-2011:175
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11892

CVSS

Base:	6.8
Impact:	6.4
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	PARTIAL	PARTIAL

CVSS vektor

AV:N/AC:M/Au:N/C:P/I:P/A:P

Zadnje važnije ažuriranje

13-02-2023 - 02:19

Objavljeno

23-04-2009 - 17:30