Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.
References
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2009-10-21 17:30
Updated : 2024-02-28 11:21
NVD link : CVE-2009-3609
Mitre link : CVE-2009-3609
CVE.ORG link : CVE-2009-3609
JSON object : View
Products Affected
poppler
- poppler
glyph_and_cog
- pdftops
glyphandcog
- xpdfreader
gnome
- gpdf
foolabs
- xpdf
kde
- kpdf
CWE
CWE-189
Numeric Errors