CVE-2009-0165
Gentoo Linux Security Advisory 201310-03
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to "g*allocn."
Desbordamiento de entero en el decodificador JBIG2 en Xpdf v3.02p12 y anteriores, como se utiliza en Poppler y otros productos, cuando corre en Mac OS X, tiene un impacto desconocido, relacionado con "g*allocn."
Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. Versions less than 0.22.2-r1 are affected.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2009-01-16 CVE Reserved
- 2009-04-23 CVE Published
- 2024-08-07 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-189: Numeric Errors
CAPEC
References (24)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/34852 | Third Party Advisory | |
| http://secunia.com/advisories/34959 | Third Party Advisory | |
| http://secunia.com/advisories/34991 | Third Party Advisory | |
| http://secunia.com/advisories/35037 | Third Party Advisory | |
| http://secunia.com/advisories/35065 | Third Party Advisory | |
| http://secunia.com/advisories/35074 | Third Party Advisory | |
| http://secunia.com/advisories/35685 | Third Party Advisory | |
| http://support.apple.com/kb/HT3549 | X_refsource_confirm |
|
| http://support.apple.com/kb/HT3639 | X_refsource_confirm |
|
| http://www.securityfocus.com/bid/34568 | Vdb Entry | |
| http://www.us-cert.gov/cas/techalerts/TA09-133A.html | Third Party Advisory | |
| http://www.vupen.com/english/advisories/2009/1297 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2009/1621 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/50377 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://bugs.gentoo.org/show_bug.cgi?id=263028 | 2019-03-06 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Foolabs Search vendor "Foolabs" | Xpdf Search vendor "Foolabs" for product "Xpdf" | 0.5a Search vendor "Foolabs" for product "Xpdf" and version "0.5a" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Foolabs Search vendor "Foolabs" | Xpdf Search vendor "Foolabs" for product "Xpdf" | 0.7a Search vendor "Foolabs" for product "Xpdf" and version "0.7a" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Foolabs Search vendor "Foolabs" | Xpdf Search vendor "Foolabs" for product "Xpdf" | 0.91a Search vendor "Foolabs" for product "Xpdf" and version "0.91a" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Foolabs Search vendor "Foolabs" | Xpdf Search vendor "Foolabs" for product "Xpdf" | 0.91b Search vendor "Foolabs" for product "Xpdf" and version "0.91b" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Foolabs Search vendor "Foolabs" | Xpdf Search vendor "Foolabs" for product "Xpdf" | 0.91c Search vendor "Foolabs" for product "Xpdf" and version "0.91c" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Foolabs Search vendor "Foolabs" | Xpdf Search vendor "Foolabs" for product "Xpdf" | 0.92a Search vendor "Foolabs" for product "Xpdf" and version "0.92a" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Foolabs Search vendor "Foolabs" | Xpdf Search vendor "Foolabs" for product "Xpdf" | 0.92b Search vendor "Foolabs" for product "Xpdf" and version "0.92b" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Foolabs Search vendor "Foolabs" | Xpdf Search vendor "Foolabs" for product "Xpdf" | 0.92c Search vendor "Foolabs" for product "Xpdf" and version "0.92c" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Foolabs Search vendor "Foolabs" | Xpdf Search vendor "Foolabs" for product "Xpdf" | 0.92d Search vendor "Foolabs" for product "Xpdf" and version "0.92d" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Foolabs Search vendor "Foolabs" | Xpdf Search vendor "Foolabs" for product "Xpdf" | 0.92e Search vendor "Foolabs" for product "Xpdf" and version "0.92e" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Foolabs Search vendor "Foolabs" | Xpdf Search vendor "Foolabs" for product "Xpdf" | 0.93a Search vendor "Foolabs" for product "Xpdf" and version "0.93a" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Foolabs Search vendor "Foolabs" | Xpdf Search vendor "Foolabs" for product "Xpdf" | 0.93b Search vendor "Foolabs" for product "Xpdf" and version "0.93b" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Foolabs Search vendor "Foolabs" | Xpdf Search vendor "Foolabs" for product "Xpdf" | 0.93c Search vendor "Foolabs" for product "Xpdf" and version "0.93c" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Foolabs Search vendor "Foolabs" | Xpdf Search vendor "Foolabs" for product "Xpdf" | 1.00a Search vendor "Foolabs" for product "Xpdf" and version "1.00a" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Foolabs Search vendor "Foolabs" | Xpdf Search vendor "Foolabs" for product "Xpdf" | 3.0.1 Search vendor "Foolabs" for product "Xpdf" and version "3.0.1" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | <= 3.02 Search vendor "Glyphandcog" for product "Xpdfreader" and version " <= 3.02" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 0.2 Search vendor "Glyphandcog" for product "Xpdfreader" and version "0.2" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 0.3 Search vendor "Glyphandcog" for product "Xpdfreader" and version "0.3" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 0.4 Search vendor "Glyphandcog" for product "Xpdfreader" and version "0.4" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 0.5 Search vendor "Glyphandcog" for product "Xpdfreader" and version "0.5" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 0.6 Search vendor "Glyphandcog" for product "Xpdfreader" and version "0.6" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 0.7 Search vendor "Glyphandcog" for product "Xpdfreader" and version "0.7" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 0.80 Search vendor "Glyphandcog" for product "Xpdfreader" and version "0.80" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 0.90 Search vendor "Glyphandcog" for product "Xpdfreader" and version "0.90" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 0.91 Search vendor "Glyphandcog" for product "Xpdfreader" and version "0.91" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 0.92 Search vendor "Glyphandcog" for product "Xpdfreader" and version "0.92" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 0.93 Search vendor "Glyphandcog" for product "Xpdfreader" and version "0.93" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 1.00 Search vendor "Glyphandcog" for product "Xpdfreader" and version "1.00" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 1.01 Search vendor "Glyphandcog" for product "Xpdfreader" and version "1.01" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 2.00 Search vendor "Glyphandcog" for product "Xpdfreader" and version "2.00" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 2.01 Search vendor "Glyphandcog" for product "Xpdfreader" and version "2.01" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 2.02 Search vendor "Glyphandcog" for product "Xpdfreader" and version "2.02" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 2.03 Search vendor "Glyphandcog" for product "Xpdfreader" and version "2.03" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 3.00 Search vendor "Glyphandcog" for product "Xpdfreader" and version "3.00" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|
| Glyphandcog Search vendor "Glyphandcog" | Xpdfreader Search vendor "Glyphandcog" for product "Xpdfreader" | 3.01 Search vendor "Glyphandcog" for product "Xpdfreader" and version "3.01" | - |
Affected
| in | Poppler Search vendor "Poppler" | Poppler Search vendor "Poppler" for product "Poppler" | * | - |
Safe
|