Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2009-1188 Details

Description

Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://bugs.gentoo.org/show_bug.cgi?id=263028#c16	CVE	Patch
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html	CVE
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html	CVE
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html	CVE
http://poppler.freedesktop.org/releases.html	CVE
https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875	CVE
https://bugzilla.redhat.com/show_bug.cgi?id=495907	CVE
https://bugzilla.redhat.com/show_bug.cgi?id=526915	CVE
http://secunia.com/advisories/34746	CVE
http://secunia.com/advisories/35064	CVE
http://secunia.com/advisories/35618	CVE
http://secunia.com/advisories/37028	CVE
http://secunia.com/advisories/37037	CVE
http://secunia.com/advisories/37043	CVE
http://secunia.com/advisories/37053	CVE
http://secunia.com/advisories/37077	CVE
http://secunia.com/advisories/37079	CVE
http://secunia.com/advisories/39327	CVE
http://secunia.com/advisories/39938	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/50185	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9957	CVE
https://rhn.redhat.com/errata/RHSA-2009-1501.html	CVE
https://rhn.redhat.com/errata/RHSA-2009-1502.html	CVE
https://rhn.redhat.com/errata/RHSA-2009-1503.html	CVE
https://rhn.redhat.com/errata/RHSA-2009-1512.html	CVE
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html	CVE
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html	CVE
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html	CVE
http://wiki.rpath.com/Advisories:rPSA-2009-0059	CVE
http://www.debian.org/security/2010/dsa-2028	CVE
http://www.debian.org/security/2010/dsa-2050	CVE
http://www.kb.cert.org/vuls/id/196617	CVE	US Government Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2010:087	CVE
http://www.mandriva.com/security/advisories?name=MDVSA-2011:175	CVE
http://www.redhat.com/support/errata/RHSA-2009-0480.html	CVE
http://www.securityfocus.com/archive/1/502761/100/0/threaded	CVE
http://www.securityfocus.com/bid/34568	CVE
http://www.vupen.com/english/advisories/2009/1076	CVE
http://www.vupen.com/english/advisories/2009/2928	CVE
http://www.vupen.com/english/advisories/2010/0802	CVE
http://www.vupen.com/english/advisories/2010/1040	CVE
http://www.vupen.com/english/advisories/2010/1220	CVE
http://bugs.gentoo.org/show_bug.cgi?id=263028#c16	[email protected]	Patch
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html	[email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html	[email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html	[email protected]
http://poppler.freedesktop.org/releases.html	[email protected]
https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875	[email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=495907	[email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=526915	[email protected]
http://secunia.com/advisories/34746	[email protected]
http://secunia.com/advisories/35064	[email protected]
http://secunia.com/advisories/35618	[email protected]
http://secunia.com/advisories/37028	[email protected]
http://secunia.com/advisories/37037	[email protected]
http://secunia.com/advisories/37043	[email protected]
http://secunia.com/advisories/37053	[email protected]
http://secunia.com/advisories/37077	[email protected]
http://secunia.com/advisories/37079	[email protected]
http://secunia.com/advisories/39327	[email protected]
http://secunia.com/advisories/39938	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/50185	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9957	[email protected]
https://rhn.redhat.com/errata/RHSA-2009-1501.html	[email protected]
https://rhn.redhat.com/errata/RHSA-2009-1502.html	[email protected]
https://rhn.redhat.com/errata/RHSA-2009-1503.html	[email protected]
https://rhn.redhat.com/errata/RHSA-2009-1512.html	[email protected]
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html	[email protected]
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html	[email protected]
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html	[email protected]
http://wiki.rpath.com/Advisories:rPSA-2009-0059	[email protected]
http://www.debian.org/security/2010/dsa-2028	[email protected]
http://www.debian.org/security/2010/dsa-2050	[email protected]
http://www.kb.cert.org/vuls/id/196617	[email protected]	US Government Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2010:087	[email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2011:175	[email protected]
http://www.redhat.com/support/errata/RHSA-2009-0480.html	[email protected]
http://www.securityfocus.com/archive/1/502761/100/0/threaded	[email protected]
http://www.securityfocus.com/bid/34568	[email protected]
http://www.vupen.com/english/advisories/2009/1076	[email protected]
http://www.vupen.com/english/advisories/2009/2928	[email protected]
http://www.vupen.com/english/advisories/2010/0802	[email protected]
http://www.vupen.com/english/advisories/2010/1040	[email protected]
http://www.vupen.com/english/advisories/2010/1220	[email protected]

see all 84 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-189	Numeric Errors	[email protected]

Affected Products

Product	Versions
poppler poppler	<= 0.10.5 0.1 0.1.1 0.1.2 0.2.0
CPE cpe:2.3:a:poppler:poppler:::::::: cpe:2.3:a:poppler:poppler:0.1:::::::* cpe:2.3:a:poppler:poppler:0.1.1:::::::* cpe:2.3:a:poppler:poppler:0.1.2:::::::* cpe:2.3:a:poppler:poppler:0.2.0:::::::* cpe:2.3:a:poppler:poppler:0.3.0:::::::* cpe:2.3:a:poppler:poppler:0.3.1:::::::* cpe:2.3:a:poppler:poppler:0.3.2:::::::* cpe:2.3:a:poppler:poppler:0.3.3:::::::* cpe:2.3:a:poppler:poppler:0.4.0:::::::* cpe:2.3:a:poppler:poppler:0.4.1:::::::* cpe:2.3:a:poppler:poppler:0.4.2:::::::* cpe:2.3:a:poppler:poppler:0.4.3:::::::* cpe:2.3:a:poppler:poppler:0.4.4:::::::* cpe:2.3:a:poppler:poppler:0.5.0:::::::* cpe:2.3:a:poppler:poppler:0.5.1:::::::* cpe:2.3:a:poppler:poppler:0.5.2:::::::* cpe:2.3:a:poppler:poppler:0.5.3:::::::* cpe:2.3:a:poppler:poppler:0.5.4:::::::* cpe:2.3:a:poppler:poppler:0.5.9:::::::* cpe:2.3:a:poppler:poppler:0.5.90:::::::* cpe:2.3:a:poppler:poppler:0.5.91:::::::* cpe:2.3:a:poppler:poppler:0.6.0:::::::* cpe:2.3:a:poppler:poppler:0.6.1:::::::* cpe:2.3:a:poppler:poppler:0.6.2:::::::* cpe:2.3:a:poppler:poppler:0.6.3:::::::* cpe:2.3:a:poppler:poppler:0.6.4:::::::* cpe:2.3:a:poppler:poppler:0.7.0:::::::* cpe:2.3:a:poppler:poppler:0.7.1:::::::* cpe:2.3:a:poppler:poppler:0.7.2:::::::* cpe:2.3:a:poppler:poppler:0.7.3:::::::* cpe:2.3:a:poppler:poppler:0.8.0:::::::* cpe:2.3:a:poppler:poppler:0.8.1:::::::* cpe:2.3:a:poppler:poppler:0.8.2:::::::* cpe:2.3:a:poppler:poppler:0.8.3:::::::* cpe:2.3:a:poppler:poppler:0.8.4:::::::* cpe:2.3:a:poppler:poppler:0.8.5:::::::* cpe:2.3:a:poppler:poppler:0.8.6:::::::* cpe:2.3:a:poppler:poppler:0.8.7:::::::* cpe:2.3:a:poppler:poppler:0.9.0:::::::* cpe:2.3:a:poppler:poppler:0.9.1:::::::* cpe:2.3:a:poppler:poppler:0.9.2:::::::* cpe:2.3:a:poppler:poppler:0.9.3:::::::* cpe:2.3:a:poppler:poppler:0.10.0:::::::* cpe:2.3:a:poppler:poppler:0.10.1:::::::* cpe:2.3:a:poppler:poppler:0.10.2:::::::* cpe:2.3:a:poppler:poppler:0.10.3:::::::* cpe:2.3:a:poppler:poppler:0.10.4:::::::* Remediation No remediation found in references.

Product

Versions

poppler poppler

<= 0.10.5

0.1

0.1.1

0.1.2

0.2.0

CPE

cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*
cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*

Remediation

No remediation found in references.

Change History

10 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 23, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Feb 13, 2023	CVE Modified	[email protected]
Feb 2, 2023	CVE Modified	[email protected]
Oct 10, 2018	CVE Modified	[email protected]
Sep 29, 2017	CVE Modified	[email protected]
Aug 17, 2017	CVE Modified	[email protected]
Apr 24, 2009	Initial Analysis	[email protected]