CVE-2009-3608
NoneCVSS
—
EPSS
10.2%
Published
Oct 21, 2009
CISA due date
—
The record
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | poppler | 0 | 0.12.2-1 |
| Debian:10 | xpdf | 0 | 3.02-2 |
| Debian:11 | poppler | 0 | 0.12.2-1 |
| Debian:11 | xpdf | 0 | 3.02-2 |
| Debian:12 | poppler | 0 | 0.12.2-1 |
| Debian:12 | xpdf | 0 | 3.02-2 |
| Debian:13 | poppler | 0 | 0.12.2-1 |
| Debian:13 | xpdf | 0 | 3.02-2 |
| Debian:5.0 | kdegraphics | 0 | 4:3.5.9-3+lenny3 |
| Debian:5.0 | poppler | 0 | 0.8.7-3 |
| Debian:5.0 | xpdf | 0 | 3.02-1.4+lenny2 |
| Red Hat:enterprise_linux:4::as | gpdf | 0 | 0:2.8.2-7.7.2.el4_8.5 |
| Red Hat:enterprise_linux:4::as | gpdf-debuginfo | 0 | 0:2.8.2-7.7.2.el4_8.5 |
| Red Hat:enterprise_linux:4::as | kdegraphics | 0 | 7:3.3.1-15.el4_8.2 |
| Red Hat:enterprise_linux:4::as | kdegraphics-debuginfo | 0 | 7:3.3.1-15.el4_8.2 |
| Red Hat:enterprise_linux:4::as | kdegraphics-devel | 0 | 7:3.3.1-15.el4_8.2 |
| Red Hat:enterprise_linux:4::as | xpdf | 0 | 1:3.00-22.el4_8.1 |
| Red Hat:enterprise_linux:4::as | xpdf-debuginfo | 0 | 1:3.00-22.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | gpdf | 0 | 0:2.8.2-7.7.2.el4_8.5 |
| Red Hat:enterprise_linux:4::desktop | gpdf-debuginfo | 0 | 0:2.8.2-7.7.2.el4_8.5 |
| Red Hat:enterprise_linux:4::desktop | kdegraphics | 0 | 7:3.3.1-15.el4_8.2 |
| Red Hat:enterprise_linux:4::desktop | kdegraphics-debuginfo | 0 | 7:3.3.1-15.el4_8.2 |
| Red Hat:enterprise_linux:4::desktop | kdegraphics-devel | 0 | 7:3.3.1-15.el4_8.2 |
| Red Hat:enterprise_linux:4::desktop | xpdf | 0 | 1:3.00-22.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | xpdf-debuginfo | 0 | 1:3.00-22.el4_8.1 |
| Red Hat:enterprise_linux:4::es | gpdf | 0 | 0:2.8.2-7.7.2.el4_8.5 |
| Red Hat:enterprise_linux:4::es | gpdf-debuginfo | 0 | 0:2.8.2-7.7.2.el4_8.5 |
| Red Hat:enterprise_linux:4::es | kdegraphics | 0 | 7:3.3.1-15.el4_8.2 |
| Red Hat:enterprise_linux:4::es | kdegraphics-debuginfo | 0 | 7:3.3.1-15.el4_8.2 |
| Red Hat:enterprise_linux:4::es | kdegraphics-devel | 0 | 7:3.3.1-15.el4_8.2 |
| Red Hat:enterprise_linux:4::es | xpdf | 0 | 1:3.00-22.el4_8.1 |
| Red Hat:enterprise_linux:4::es | xpdf-debuginfo | 0 | 1:3.00-22.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | gpdf | 0 | 0:2.8.2-7.7.2.el4_8.5 |
| Red Hat:enterprise_linux:4::ws | gpdf-debuginfo | 0 | 0:2.8.2-7.7.2.el4_8.5 |
| Red Hat:enterprise_linux:4::ws | kdegraphics | 0 | 7:3.3.1-15.el4_8.2 |
| Red Hat:enterprise_linux:4::ws | kdegraphics-debuginfo | 0 | 7:3.3.1-15.el4_8.2 |
| Red Hat:enterprise_linux:4::ws | kdegraphics-devel | 0 | 7:3.3.1-15.el4_8.2 |
| Red Hat:enterprise_linux:4::ws | xpdf | 0 | 1:3.00-22.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | xpdf-debuginfo | 0 | 1:3.00-22.el4_8.1 |
| Red Hat:enterprise_linux:5::client | cups | 0 | 1:1.3.7-11.el5_4.3 |
| Red Hat:enterprise_linux:5::client | cups-debuginfo | 0 | 1:1.3.7-11.el5_4.3 |
| Red Hat:enterprise_linux:5::client | cups-devel | 0 | 1:1.3.7-11.el5_4.3 |
| Red Hat:enterprise_linux:5::client | cups-libs | 0 | 1:1.3.7-11.el5_4.3 |
| Red Hat:enterprise_linux:5::client | cups-lpd | 0 | 1:1.3.7-11.el5_4.3 |
| Red Hat:enterprise_linux:5::client | kdegraphics | 0 | 7:3.5.4-15.el5_4.2 |
| Red Hat:enterprise_linux:5::client | kdegraphics-debuginfo | 0 | 7:3.5.4-15.el5_4.2 |
| Red Hat:enterprise_linux:5::client | kdegraphics-devel | 0 | 7:3.5.4-15.el5_4.2 |
| Red Hat:enterprise_linux:5::client | poppler | 0 | 0:0.5.4-4.4.el5_4.11 |
| Red Hat:enterprise_linux:5::client | poppler-debuginfo | 0 | 0:0.5.4-4.4.el5_4.11 |
| Red Hat:enterprise_linux:5::client | poppler-devel | 0 | 0:0.5.4-4.4.el5_4.11 |
| Red Hat:enterprise_linux:5::client | poppler-utils | 0 | 0:0.5.4-4.4.el5_4.11 |
| Red Hat:enterprise_linux:5::client | tetex | 0 | 0:3.0-33.8.el5_5.5 |
| Red Hat:enterprise_linux:5::client | tetex-afm | 0 | 0:3.0-33.8.el5_5.5 |
| Red Hat:enterprise_linux:5::client | tetex-debuginfo | 0 | 0:3.0-33.8.el5_5.5 |
| Red Hat:enterprise_linux:5::client | tetex-doc | 0 | 0:3.0-33.8.el5_5.5 |
| Red Hat:enterprise_linux:5::client | tetex-dvips | 0 | 0:3.0-33.8.el5_5.5 |
| Red Hat:enterprise_linux:5::client | tetex-fonts | 0 | 0:3.0-33.8.el5_5.5 |
| Red Hat:enterprise_linux:5::client | tetex-latex | 0 | 0:3.0-33.8.el5_5.5 |
| Red Hat:enterprise_linux:5::client | tetex-xdvi | 0 | 0:3.0-33.8.el5_5.5 |
| Red Hat:enterprise_linux:5::client_workstation | cups | 0 | 1:1.3.7-11.el5_4.3 |
| Red Hat:enterprise_linux:5::client_workstation | cups-debuginfo | 0 | 1:1.3.7-11.el5_4.3 |
| Red Hat:enterprise_linux:5::client_workstation | cups-devel | 0 | 1:1.3.7-11.el5_4.3 |
| Red Hat:enterprise_linux:5::client_workstation | cups-libs | 0 | 1:1.3.7-11.el5_4.3 |
| Red Hat:enterprise_linux:5::client_workstation | cups-lpd | 0 | 1:1.3.7-11.el5_4.3 |
| Red Hat:enterprise_linux:5::client_workstation | kdegraphics | 0 | 7:3.5.4-15.el5_4.2 |
| Red Hat:enterprise_linux:5::client_workstation | kdegraphics-debuginfo | 0 | 7:3.5.4-15.el5_4.2 |
| Red Hat:enterprise_linux:5::client_workstation | kdegraphics-devel | 0 | 7:3.5.4-15.el5_4.2 |
| Red Hat:enterprise_linux:5::client_workstation | poppler | 0 | 0:0.5.4-4.4.el5_4.11 |
| Red Hat:enterprise_linux:5::client_workstation | poppler-debuginfo | 0 | 0:0.5.4-4.4.el5_4.11 |
| Red Hat:enterprise_linux:5::client_workstation | poppler-devel | 0 | 0:0.5.4-4.4.el5_4.11 |
| Red Hat:enterprise_linux:5::client_workstation | poppler-utils | 0 | 0:0.5.4-4.4.el5_4.11 |
| Red Hat:enterprise_linux:5::server | cups | 0 | 1:1.3.7-11.el5_4.3 |
| Red Hat:enterprise_linux:5::server | cups-debuginfo | 0 | 1:1.3.7-11.el5_4.3 |
| Red Hat:enterprise_linux:5::server | cups-devel | 0 | 1:1.3.7-11.el5_4.3 |
| Red Hat:enterprise_linux:5::server | cups-libs | 0 | 1:1.3.7-11.el5_4.3 |
| Red Hat:enterprise_linux:5::server | cups-lpd | 0 | 1:1.3.7-11.el5_4.3 |
| Red Hat:enterprise_linux:5::server | poppler | 0 | 0:0.5.4-4.4.el5_4.11 |
| Red Hat:enterprise_linux:5::server | poppler-debuginfo | 0 | 0:0.5.4-4.4.el5_4.11 |
| Red Hat:enterprise_linux:5::server | poppler-devel | 0 | 0:0.5.4-4.4.el5_4.11 |
| Red Hat:enterprise_linux:5::server | poppler-utils | 0 | 0:0.5.4-4.4.el5_4.11 |
| Red Hat:enterprise_linux:5::server | tetex | 0 | 0:3.0-33.8.el5_5.5 |
| Red Hat:enterprise_linux:5::server | tetex-afm | 0 | 0:3.0-33.8.el5_5.5 |
| Red Hat:enterprise_linux:5::server | tetex-debuginfo | 0 | 0:3.0-33.8.el5_5.5 |
| Red Hat:enterprise_linux:5::server | tetex-doc | 0 | 0:3.0-33.8.el5_5.5 |
| Red Hat:enterprise_linux:5::server | tetex-dvips | 0 | 0:3.0-33.8.el5_5.5 |
| Red Hat:enterprise_linux:5::server | tetex-fonts | 0 | 0:3.0-33.8.el5_5.5 |
| Red Hat:enterprise_linux:5::server | tetex-latex | 0 | 0:3.0-33.8.el5_5.5 |
| Red Hat:enterprise_linux:5::server | tetex-xdvi | 0 | 0:3.0-33.8.el5_5.5 |
| Red Hat:rhel_productivity:5 | kdegraphics | 0 | 7:3.5.4-15.el5_4.2 |
| Red Hat:rhel_productivity:5 | kdegraphics-debuginfo | 0 | 7:3.5.4-15.el5_4.2 |
| Red Hat:rhel_productivity:5 | kdegraphics-devel | 0 | 7:3.5.4-15.el5_4.2 |
| Ubuntu:16.04:LTS | ipe | 0 | No fix |
| Ubuntu:18.04:LTS | ipe | 0 | No fix |
| Ubuntu:20.04:LTS | ipe | 0 | No fix |
| Ubuntu:22.04:LTS | ipe | 0 | No fix |
| Ubuntu:24.04:LTS | ipe | 0 | No fix |
| Ubuntu:24.10 | ipe | 0 | No fix |
| Ubuntu:25.04 | ipe | 0 | No fix |
| Ubuntu:25.10 | ipe | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | ipe | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | ipe | 0 | No fix |
| Ubuntu:Pro:20.04:LTS | ipe | 0 | No fix |
| openSUSE:Tumbleweed | poppler | 0 | 0.49.0-1.1 |
Related vulnerabilities
- CVE-2017-14518 In Poppler 0.59.0, a floating point exception exists in the… Also affects poppler
- CVE-2017-14517 In Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry() function… Also affects poppler
- CVE-2017-2820 An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing… Also affects poppler
- CVE-2013-4474 Format string vulnerability in the extractPages function in utils/pdfseparate.cc in… Also affects poppler
- CVE-2013-4473 Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in… Also affects poppler
- CVE-2009-0755 The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote… Also affects poppler
- CVE-2009-0756 The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote… Also affects poppler
- CVE-2008-2950 The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a… Also affects poppler