CVE-2009-0756

The record

The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::~JBIG2SymbolDict and triggers an invalid memory dereference.

Affected packages

Related vulnerabilities

• CVE-2017-14518 In Poppler 0.59.0, a floating point exception exists in the… Also affects poppler
• CVE-2017-14517 In Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry() function… Also affects poppler
• CVE-2017-2820 An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing… Also affects poppler
• CVE-2013-4474 Format string vulnerability in the extractPages function in utils/pdfseparate.cc in… Also affects poppler
• CVE-2013-4473 Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in… Also affects poppler
• CVE-2009-3608 Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before… Also affects poppler
• CVE-2009-0755 The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote… Also affects poppler
• CVE-2008-2950 The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a… Also affects poppler