MDVSA-2010:055

Executive Summary

Informations
Name	MDVSA-2010:055	First vendor Publication	2010-03-04
Vendor	Mandriva	Last vendor Modification	2010-03-04
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

An out-of-bounds reading flaw in the JBIG2 decoder allows remote attackers to cause a denial of service (crash) via a crafted PDF file (CVE-2009-0799).

Multiple input validation flaws in the JBIG2 decoder allows remote attackers to execute arbitrary code via a crafted PDF file (CVE-2009-0800).

An integer overflow in the JBIG2 decoder allows remote attackers to execute arbitrary code via a crafted PDF file (CVE-2009-1179).

A free of invalid data flaw in the JBIG2 decoder allows remote attackers to execute arbitrary code via a crafted PDF (CVE-2009-1180).

A NULL pointer dereference flaw in the JBIG2 decoder allows remote attackers to cause denial of service (crash) via a crafted PDF file (CVE-2009-1181).

Multiple buffer overflows in the JBIG2 MMR decoder allows remote attackers to cause denial of service or to execute arbitrary code via a crafted PDF file (CVE-2009-1182, CVE-2009-1183).

An integer overflow in the JBIG2 decoding feature allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CVE-2009-1187).

An integer overflow in the JBIG2 decoding feature allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document (CVE-2009-1188).

Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1188 (CVE-2009-3603).

The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow (CVE-2009-3604).

Multiple integer overflows allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, related to (1) glib/poppler-page.cc; (2) ArthurOutputDev.cc, (3) CairoOutputDev.cc, (4) GfxState.cc, (5) JBIG2Stream.cc, (6) PSOutputDev.cc, and (7) SplashOutputDev.cc in poppler/; and (8) SplashBitmap.cc, (9) Splash.cc, and (10) SplashFTFont.cc in splash/. NOTE: this may overlap CVE-2009-0791 (CVE-2009-3605).

Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow (CVE-2009-3606).

Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information (CVE-2009-3607).

Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow (CVE-2009-3608).

Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read (CVE-2009-3609).

Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc as used by the Abiword pdftoabw utility, allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PDF file (CVE-2009-3938). This update provides fixes for that vulnerabilities.

Original Source

Url : http://www.mandriva.com/security/advisories?name=MDVSA-2010:055

CWE : Common Weakness Enumeration

id	Name
CWE-189	Numeric Errors
CWE-399	Resource Management Errors
CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
CWE-20	Improper Input Validation

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10534

Oval ID:	oval:org.mitre.oval:def:10534
Title:	Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179.
Description:	Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0791	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section tetex-latex is earlier than 0:1.0.7-67.19 AND tetex-dvips is earlier than 0:1.0.7-67.19 AND tetex-fonts is earlier than 0:1.0.7-67.19 AND cups-libs is earlier than 1:1.1.17-13.3.62 AND tetex is earlier than 0:1.0.7-67.19 AND cups-devel is earlier than 1:1.1.17-13.3.62 AND tetex-afm is earlier than 0:1.0.7-67.19 AND xpdf is earlier than 1:2.02-17.el3 AND tetex-xdvi is earlier than 0:1.0.7-67.19 AND tetex-doc is earlier than 0:1.0.7-67.19 AND cups is earlier than 1:1.1.17-13.3.62 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics-devel is earlier than 7:3.3.1-15.el4_8.2 AND tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics is earlier than 7:3.3.1-15.el4_8.2 AND tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups-libs is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3 AND tetex is earlier than 0:2.0.2-22.0.1.EL4.16 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_8.5 AND cups-devel is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3 AND tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16 AND xpdf is earlier than 1:3.00-22.el4_8.1 AND tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND kdegraphics-devel is earlier than 7:3.5.4-15.el5_4.2 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9 AND kdegraphics is earlier than 7:3.5.4-15.el5_4.2 AND poppler is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5

Definition Id: oval:org.mitre.oval:def:10204

Oval ID:	oval:org.mitre.oval:def:10204
Title:	The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read.
Description:	The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0799	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND xpdf is earlier than 1:2.02-14.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics-devel is earlier than 7:3.3.1-13.el4 AND tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics is earlier than 7:3.3.1-13.el4 AND tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex is earlier than 0:2.0.2-22.0.1.EL4.16 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4 AND cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16 AND xpdf is earlier than 1:3.00-20.el4 AND tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section kdegraphics-devel is earlier than 7:3.5.4-12.el5_3 AND cups-lpd is earlier than 1:1.3.7-8.el5_3.4 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND kdegraphics is earlier than 7:3.5.4-12.el5_3 AND poppler is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND cups-libs is earlier than 1:1.3.7-8.el5_3.4 AND tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9 AND cups-devel is earlier than 1:1.3.7-8.el5_3.4 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND cups is earlier than 1:1.3.7-8.el5_3.4

Definition Id: oval:org.mitre.oval:def:11323

Oval ID:	oval:org.mitre.oval:def:11323
Title:	Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.
Description:	Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0800	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND xpdf is earlier than 1:2.02-14.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics-devel is earlier than 7:3.3.1-13.el4 AND tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics is earlier than 7:3.3.1-13.el4 AND tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex is earlier than 0:2.0.2-22.0.1.EL4.16 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4 AND cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16 AND xpdf is earlier than 1:3.00-20.el4 AND tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section kdegraphics-devel is earlier than 7:3.5.4-12.el5_3 AND cups-lpd is earlier than 1:1.3.7-8.el5_3.4 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND kdegraphics is earlier than 7:3.5.4-12.el5_3 AND poppler is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND cups-libs is earlier than 1:1.3.7-8.el5_3.4 AND tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9 AND cups-devel is earlier than 1:1.3.7-8.el5_3.4 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND cups is earlier than 1:1.3.7-8.el5_3.4

Definition Id: oval:org.mitre.oval:def:11892

Oval ID:	oval:org.mitre.oval:def:11892
Title:	Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.
Description:	Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1179	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND xpdf is earlier than 1:2.02-14.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics-devel is earlier than 7:3.3.1-13.el4 AND tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics is earlier than 7:3.3.1-13.el4 AND tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex is earlier than 0:2.0.2-22.0.1.EL4.16 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4 AND cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16 AND xpdf is earlier than 1:3.00-20.el4 AND tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section kdegraphics-devel is earlier than 7:3.5.4-12.el5_3 AND cups-lpd is earlier than 1:1.3.7-8.el5_3.4 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND kdegraphics is earlier than 7:3.5.4-12.el5_3 AND poppler is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND cups-libs is earlier than 1:1.3.7-8.el5_3.4 AND tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9 AND cups-devel is earlier than 1:1.3.7-8.el5_3.4 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND cups is earlier than 1:1.3.7-8.el5_3.4

Definition Id: oval:org.mitre.oval:def:9926

Oval ID:	oval:org.mitre.oval:def:9926
Title:	The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.
Description:	The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1180	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND xpdf is earlier than 1:2.02-14.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics-devel is earlier than 7:3.3.1-13.el4 AND tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics is earlier than 7:3.3.1-13.el4 AND tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex is earlier than 0:2.0.2-22.0.1.EL4.16 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4 AND cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16 AND xpdf is earlier than 1:3.00-20.el4 AND tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section kdegraphics-devel is earlier than 7:3.5.4-12.el5_3 AND cups-lpd is earlier than 1:1.3.7-8.el5_3.4 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND kdegraphics is earlier than 7:3.5.4-12.el5_3 AND poppler is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND cups-libs is earlier than 1:1.3.7-8.el5_3.4 AND tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9 AND cups-devel is earlier than 1:1.3.7-8.el5_3.4 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND cups is earlier than 1:1.3.7-8.el5_3.4

Definition Id: oval:org.mitre.oval:def:9683

Oval ID:	oval:org.mitre.oval:def:9683
Title:	The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference.
Description:	The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1181	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND xpdf is earlier than 1:2.02-14.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics-devel is earlier than 7:3.3.1-13.el4 AND tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics is earlier than 7:3.3.1-13.el4 AND tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex is earlier than 0:2.0.2-22.0.1.EL4.16 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4 AND cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16 AND xpdf is earlier than 1:3.00-20.el4 AND tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section kdegraphics-devel is earlier than 7:3.5.4-12.el5_3 AND cups-lpd is earlier than 1:1.3.7-8.el5_3.4 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND kdegraphics is earlier than 7:3.5.4-12.el5_3 AND poppler is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND cups-libs is earlier than 1:1.3.7-8.el5_3.4 AND tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9 AND cups-devel is earlier than 1:1.3.7-8.el5_3.4 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND cups is earlier than 1:1.3.7-8.el5_3.4

Definition Id: oval:org.mitre.oval:def:10735

Oval ID:	oval:org.mitre.oval:def:10735
Title:	Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.
Description:	Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1182	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND xpdf is earlier than 1:2.02-14.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics-devel is earlier than 7:3.3.1-13.el4 AND tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics is earlier than 7:3.3.1-13.el4 AND tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex is earlier than 0:2.0.2-22.0.1.EL4.16 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4 AND cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16 AND xpdf is earlier than 1:3.00-20.el4 AND tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section kdegraphics-devel is earlier than 7:3.5.4-12.el5_3 AND cups-lpd is earlier than 1:1.3.7-8.el5_3.4 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND kdegraphics is earlier than 7:3.5.4-12.el5_3 AND poppler is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND cups-libs is earlier than 1:1.3.7-8.el5_3.4 AND tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9 AND cups-devel is earlier than 1:1.3.7-8.el5_3.4 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND cups is earlier than 1:1.3.7-8.el5_3.4

Definition Id: oval:org.mitre.oval:def:10769

Oval ID:	oval:org.mitre.oval:def:10769
Title:	The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file.
Description:	The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1183	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND xpdf is earlier than 1:2.02-14.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics-devel is earlier than 7:3.3.1-13.el4 AND tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics is earlier than 7:3.3.1-13.el4 AND tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex is earlier than 0:2.0.2-22.0.1.EL4.16 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4 AND cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 AND tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16 AND xpdf is earlier than 1:3.00-20.el4 AND tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16 AND cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section kdegraphics-devel is earlier than 7:3.5.4-12.el5_3 AND cups-lpd is earlier than 1:1.3.7-8.el5_3.4 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND kdegraphics is earlier than 7:3.5.4-12.el5_3 AND poppler is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND cups-libs is earlier than 1:1.3.7-8.el5_3.4 AND tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9 AND tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9 AND cups-devel is earlier than 1:1.3.7-8.el5_3.4 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND cups is earlier than 1:1.3.7-8.el5_3.4

Definition Id: oval:org.mitre.oval:def:10292

Oval ID:	oval:org.mitre.oval:def:10292
Title:	Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).
Description:	Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1187	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9 AND poppler is earlier than 0:0.5.4-4.4.el5_3.9

Definition Id: oval:org.mitre.oval:def:9957

Oval ID:	oval:org.mitre.oval:def:9957
Title:	Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.
Description:	Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1188	Version:	5
Platform(s):	Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section kdegraphics-devel is earlier than 7:3.3.1-15.el4_8.2 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_8.5 AND xpdf is earlier than 1:3.00-22.el4_8.1 AND kdegraphics is earlier than 7:3.3.1-15.el4_8.2 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section kdegraphics-devel is earlier than 7:3.5.4-15.el5_4.2 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9 AND kdegraphics is earlier than 7:3.5.4-15.el5_4.2 AND poppler is earlier than 0:0.5.4-4.4.el5_3.9

Definition Id: oval:org.mitre.oval:def:9671

Oval ID:	oval:org.mitre.oval:def:9671
Title:	Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1188.
Description:	Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1188.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3603	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section poppler-utils is earlier than 0:0.5.4-4.4.el5_4.11 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_4.11 AND poppler is earlier than 0:0.5.4-4.4.el5_4.11

Definition Id: oval:org.mitre.oval:def:10969

Oval ID:	oval:org.mitre.oval:def:10969
Title:	The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.
Description:	The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3604	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND xpdf is earlier than 1:2.02-17.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section kdegraphics-devel is earlier than 7:3.3.1-15.el4_8.2 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_8.5 AND xpdf is earlier than 1:3.00-22.el4_8.1 AND kdegraphics is earlier than 7:3.3.1-15.el4_8.2 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section kdegraphics-devel is earlier than 7:3.5.4-15.el5_4.2 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9 AND kdegraphics is earlier than 7:3.5.4-15.el5_4.2 AND poppler is earlier than 0:0.5.4-4.4.el5_3.9

Definition Id: oval:org.mitre.oval:def:7731

Oval ID:	oval:org.mitre.oval:def:7731
Title:	Multiple Security Vulnerabilities in the Solaris GNOME PDF Rendering Libraries May Lead to a Denial of Service (DoS) or Execution of Arbitrary Code
Description:	Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, related to (1) glib/poppler-page.cc; (2) ArthurOutputDev.cc, (3) CairoOutputDev.cc, (4) GfxState.cc, (5) JBIG2Stream.cc, (6) PSOutputDev.cc, and (7) SplashOutputDev.cc in poppler/; and (8) SplashBitmap.cc, (9) Splash.cc, and (10) SplashFTFont.cc in splash/. NOTE: this may overlap CVE-2009-0791.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3605	Version:	2
Platform(s):	Sun Solaris 10	Product(s):
Definition Synopsis:
Solaris 10 (SPARC) meets Sun Alert 274030 Solaris 10 (SPARC) is installed AND NOT Patch 120739-06 or later installed OR Solaris 10 (x86) meets Sun Alert 274030 Solaris 10 (x86) is installed AND NOT Patch 120740-06 or later installed

Definition Id: oval:org.mitre.oval:def:7836

Oval ID:	oval:org.mitre.oval:def:7836
Title:	Multiple Security Vulnerabilities in the Solaris GNOME PDF Rendering Libraries May Lead to a Denial of Service (DoS) or Execution of Arbitrary Code
Description:	Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3606	Version:	2
Platform(s):	Sun Solaris 10	Product(s):
Definition Synopsis:
Solaris 10 (SPARC) meets Sun Alert 274030 Solaris 10 (SPARC) is installed AND NOT Patch 120739-06 or later installed OR Solaris 10 (x86) meets Sun Alert 274030 Solaris 10 (x86) is installed AND NOT Patch 120740-06 or later installed

Definition Id: oval:org.mitre.oval:def:11289

Oval ID:	oval:org.mitre.oval:def:11289
Title:	Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Description:	Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3606	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND xpdf is earlier than 1:2.02-17.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4 AND xpdf is earlier than 1:3.00-22.el4_8.1 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section kdegraphics-devel is earlier than 7:3.5.4-15.el5_4.2 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9 AND kdegraphics is earlier than 7:3.5.4-15.el5_4.2 AND poppler is earlier than 0:0.5.4-4.4.el5_3.9

Definition Id: oval:org.mitre.oval:def:9536

Oval ID:	oval:org.mitre.oval:def:9536
Title:	Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Description:	Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3608	Version:	5
Platform(s):	Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section kdegraphics-devel is earlier than 7:3.3.1-15.el4_8.2 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_8.5 AND xpdf is earlier than 1:3.00-22.el4_8.1 AND kdegraphics is earlier than 7:3.3.1-15.el4_8.2 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section kdegraphics-devel is earlier than 7:3.5.4-15.el5_4.2 AND cups-lpd is earlier than 1:1.3.7-11.el5_4.3 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND kdegraphics is earlier than 7:3.5.4-15.el5_4.2 AND poppler is earlier than 0:0.5.4-4.4.el5_4.11 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND cups-libs is earlier than 1:1.3.7-11.el5_4.3 AND tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_4.11 AND tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_4.11 AND cups-devel is earlier than 1:1.3.7-11.el5_4.3 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND cups is earlier than 1:1.3.7-11.el5_4.3

Definition Id: oval:org.mitre.oval:def:8134

Oval ID:	oval:org.mitre.oval:def:8134
Title:	Multiple Security Vulnerabilities in the Solaris GNOME PDF Rendering Libraries May Lead to a Denial of Service (DoS) or Execution of Arbitrary Code
Description:	Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3609	Version:	2
Platform(s):	Sun Solaris 10	Product(s):
Definition Synopsis:
Solaris 10 (SPARC) meets Sun Alert 274030 Solaris 10 (SPARC) is installed AND NOT Patch 120739-06 or later installed OR Solaris 10 (x86) meets Sun Alert 274030 Solaris 10 (x86) is installed AND NOT Patch 120740-06 or later installed

Definition Id: oval:org.mitre.oval:def:11043

Oval ID:	oval:org.mitre.oval:def:11043
Title:	Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.
Description:	Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3609	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section tetex-latex is earlier than 0:1.0.7-67.19 AND tetex-dvips is earlier than 0:1.0.7-67.19 AND tetex-fonts is earlier than 0:1.0.7-67.19 AND tetex is earlier than 0:1.0.7-67.19 AND tetex-afm is earlier than 0:1.0.7-67.19 AND tetex-doc is earlier than 0:1.0.7-67.19 AND tetex-xdvi is earlier than 0:1.0.7-67.19 AND xpdf is earlier than 1:2.02-17.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics-devel is earlier than 7:3.3.1-15.el4_8.2 AND tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16 AND kdegraphics is earlier than 7:3.3.1-15.el4_8.2 AND tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex is earlier than 0:2.0.2-22.0.1.EL4.16 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_8.5 AND tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16 AND xpdf is earlier than 1:3.00-22.el4_8.1 AND tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16 AND tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section kdegraphics-devel is earlier than 7:3.5.4-15.el5_4.2 AND cups-lpd is earlier than 1:1.3.7-11.el5_4.3 AND tetex-dvips is earlier than 0:3.0-33.8.el5_5.5 AND kdegraphics is earlier than 7:3.5.4-15.el5_4.2 AND poppler is earlier than 0:0.5.4-4.4.el5_4.11 AND tetex-fonts is earlier than 0:3.0-33.8.el5_5.5 AND cups-libs is earlier than 1:1.3.7-11.el5_4.3 AND tetex is earlier than 0:3.0-33.8.el5_5.5 AND tetex-doc is earlier than 0:3.0-33.8.el5_5.5 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_4.11 AND tetex-latex is earlier than 0:3.0-33.8.el5_5.5 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_4.11 AND cups-devel is earlier than 1:1.3.7-11.el5_4.3 AND tetex-afm is earlier than 0:3.0-33.8.el5_5.5 AND tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5 AND cups is earlier than 1:1.3.7-11.el5_4.3

CPE : Common Platform Enumeration

Type	Description	Count
Application	Apple Cups cpe:/a:apple:cups:1.3.9 cpe:/a:apple:cups:1.3.8 cpe:/a:apple:cups:1.3.7 cpe:/a:apple:cups:1.3.6 cpe:/a:apple:cups:1.3.5 cpe:/a:apple:cups:1.3.4 cpe:/a:apple:cups:1.3.3 cpe:/a:apple:cups:1.3.2 cpe:/a:apple:cups:1.3.11 cpe:/a:apple:cups:1.3.10 cpe:/a:apple:cups:1.3.1 cpe:/a:apple:cups:1.3.0 cpe:/a:apple:cups:1.2.9 cpe:/a:apple:cups:1.2.8 cpe:/a:apple:cups:1.2.7 cpe:/a:apple:cups:1.2.6 cpe:/a:apple:cups:1.2.5 cpe:/a:apple:cups:1.2.4 cpe:/a:apple:cups:1.2.3 cpe:/a:apple:cups:1.2.2 cpe:/a:apple:cups:1.2.12 cpe:/a:apple:cups:1.2.11 cpe:/a:apple:cups:1.2.10 cpe:/a:apple:cups:1.2.1 cpe:/a:apple:cups:1.2.0 cpe:/a:apple:cups:1.1.9-1 cpe:/a:apple:cups:1.1.9 cpe:/a:apple:cups:1.1.8 cpe:/a:apple:cups:1.1.7 cpe:/a:apple:cups:1.1.6-3 cpe:/a:apple:cups:1.1.6-2 cpe:/a:apple:cups:1.1.6-1 cpe:/a:apple:cups:1.1.6 cpe:/a:apple:cups:1.1.5-2 cpe:/a:apple:cups:1.1.5-1 cpe:/a:apple:cups:1.1.5 cpe:/a:apple:cups:1.1.4 cpe:/a:apple:cups:1.1.3 cpe:/a:apple:cups:1.1.23 cpe:/a:apple:cups:1.1.23:rc1 cpe:/a:apple:cups:1.1.22:rc2 cpe:/a:apple:cups:1.1.22 cpe:/a:apple:cups:1.1.22:rc1 cpe:/a:apple:cups:1.1.21:rc1 cpe:/a:apple:cups:1.1.21 cpe:/a:apple:cups:1.1.21:rc2 cpe:/a:apple:cups:1.1.20:rc3 cpe:/a:apple:cups:1.1.20:rc1 cpe:/a:apple:cups:1.1.20 cpe:/a:apple:cups:1.1.20:rc5 cpe:/a:apple:cups:1.1.20:rc6 cpe:/a:apple:cups:1.1.20:rc2 cpe:/a:apple:cups:1.1.20:rc4 cpe:/a:apple:cups:1.1.2 cpe:/a:apple:cups:1.1.19:rc1 cpe:/a:apple:cups:1.1.19:rc3 cpe:/a:apple:cups:1.1.19 cpe:/a:apple:cups:1.1.19:rc4 cpe:/a:apple:cups:1.1.19:rc5 cpe:/a:apple:cups:1.1.19:rc2 cpe:/a:apple:cups:1.1.18 cpe:/a:apple:cups:1.1.17 cpe:/a:apple:cups:1.1.16 cpe:/a:apple:cups:1.1.15 cpe:/a:apple:cups:1.1.14 cpe:/a:apple:cups:1.1.13 cpe:/a:apple:cups:1.1.12 cpe:/a:apple:cups:1.1.11 cpe:/a:apple:cups:1.1.10-1 cpe:/a:apple:cups:1.1.10 cpe:/a:apple:cups:1.1.1 cpe:/a:apple:cups:1.1	72
Application	Foolabs Xpdf cpe:/a:foolabs:xpdf:3.02pl3 cpe:/a:foolabs:xpdf:3.02pl2 cpe:/a:foolabs:xpdf:3.02pl1 cpe:/a:foolabs:xpdf:3.02 cpe:/a:foolabs:xpdf:3.01 cpe:/a:foolabs:xpdf:3.00 cpe:/a:foolabs:xpdf:2.03 cpe:/a:foolabs:xpdf:2.02 cpe:/a:foolabs:xpdf:2.01 cpe:/a:foolabs:xpdf:2.00 cpe:/a:foolabs:xpdf:1.01 cpe:/a:foolabs:xpdf:1.00a cpe:/a:foolabs:xpdf:1.00 cpe:/a:foolabs:xpdf:0.93c cpe:/a:foolabs:xpdf:0.93b cpe:/a:foolabs:xpdf:0.93a cpe:/a:foolabs:xpdf:0.93 cpe:/a:foolabs:xpdf:0.92e cpe:/a:foolabs:xpdf:0.92d cpe:/a:foolabs:xpdf:0.92c cpe:/a:foolabs:xpdf:0.92b cpe:/a:foolabs:xpdf:0.92a cpe:/a:foolabs:xpdf:0.92 cpe:/a:foolabs:xpdf:0.91c cpe:/a:foolabs:xpdf:0.91b cpe:/a:foolabs:xpdf:0.91a cpe:/a:foolabs:xpdf:0.91 cpe:/a:foolabs:xpdf:0.90 cpe:/a:foolabs:xpdf:0.80 cpe:/a:foolabs:xpdf:0.7a cpe:/a:foolabs:xpdf:0.7 cpe:/a:foolabs:xpdf:0.6 cpe:/a:foolabs:xpdf:0.5a cpe:/a:foolabs:xpdf:0.5 cpe:/a:foolabs:xpdf:0.4 cpe:/a:foolabs:xpdf:0.3 cpe:/a:foolabs:xpdf:0.2	37
Application	Poppler Poppler cpe:/a:poppler:poppler:0.9.3 cpe:/a:poppler:poppler:0.9.2 cpe:/a:poppler:poppler:0.9.1 cpe:/a:poppler:poppler:0.9.0 cpe:/a:poppler:poppler:0.8.7 cpe:/a:poppler:poppler:0.8.6 cpe:/a:poppler:poppler:0.8.5 cpe:/a:poppler:poppler:0.8.4 cpe:/a:poppler:poppler:0.8.3 cpe:/a:poppler:poppler:0.8.2 cpe:/a:poppler:poppler:0.8.1 cpe:/a:poppler:poppler:0.8.0 cpe:/a:poppler:poppler:0.7.3 cpe:/a:poppler:poppler:0.7.2 cpe:/a:poppler:poppler:0.7.1 cpe:/a:poppler:poppler:0.7.0 cpe:/a:poppler:poppler:0.6.4 cpe:/a:poppler:poppler:0.6.3 cpe:/a:poppler:poppler:0.6.2 cpe:/a:poppler:poppler:0.6.1 cpe:/a:poppler:poppler:0.6.0 cpe:/a:poppler:poppler:0.5.91 cpe:/a:poppler:poppler:0.5.90 cpe:/a:poppler:poppler:0.5.9 cpe:/a:poppler:poppler:0.5.4 cpe:/a:poppler:poppler:0.5.3 cpe:/a:poppler:poppler:0.5.2 cpe:/a:poppler:poppler:0.5.1 cpe:/a:poppler:poppler:0.5.0 cpe:/a:poppler:poppler:0.4.4 cpe:/a:poppler:poppler:0.4.3 cpe:/a:poppler:poppler:0.4.2 cpe:/a:poppler:poppler:0.4.1 cpe:/a:poppler:poppler:0.4.0 cpe:/a:poppler:poppler:0.3.3 cpe:/a:poppler:poppler:0.3.2 cpe:/a:poppler:poppler:0.3.1 cpe:/a:poppler:poppler:0.3.0 cpe:/a:poppler:poppler:0.2.0 cpe:/a:poppler:poppler:0.12.0 cpe:/a:poppler:poppler:0.11.3 cpe:/a:poppler:poppler:0.11.2 cpe:/a:poppler:poppler:0.11.1 cpe:/a:poppler:poppler:0.11.0 cpe:/a:poppler:poppler:0.10.7 cpe:/a:poppler:poppler:0.10.6 cpe:/a:poppler:poppler:0.10.5 cpe:/a:poppler:poppler:0.10.4 cpe:/a:poppler:poppler:0.10.3 cpe:/a:poppler:poppler:0.10.2 cpe:/a:poppler:poppler:0.10.1 cpe:/a:poppler:poppler:0.10.0 cpe:/a:poppler:poppler:0.1.2 cpe:/a:poppler:poppler:0.1.1 cpe:/a:poppler:poppler:0.1	55

Open Source Vulnerability Database (OSVDB)

id	Description
59936	Poppler pdftoabw Utility poppler/ABWOutputDev.cc ABWOutputDev::endWord Functi...
59825	Poppler PDF Handling Multiple Unspecified Overflows
59824	Poppler pdftops Filter PDF File Handling Multiple Unspecified Overflows
59184	Poppler XRef.cc ObjectStream::ObjectStream Function PDF Handling Overflow
59183	Xpdf XRef.cc ObjectStream::ObjectStream Function PDF Handling Overflow
59182	Poppler PSOutputDev::doImageL1Sep Function PDF Handling Overflow
59181	Xpdf PSOutputDev::doImageL1Sep Function PDF Handling Overflow
59180	Poppler Stream.cc ImageStream::ImageStream Function PDF Handling Overflow
59179	Xpdf Stream.cc ImageStream::ImageStream Function PDF Handling Overflow
59178	Poppler SplashBitmap::SplashBitmap Function PDF Handling Overflow
59177	Xpdf SplashBitmap::SplashBitmap Function PDF Handling Overflow
59176	Poppler Splash.cc Splash::drawImage Function PDF Handling Arbitrary Code Exec...
59175	Xpdf Splash.cc Splash::drawImage Function PDF Handling Arbitrary Code Execution
59143	Poppler glib/poppler-page.cc create_surface_from_thumbnail_data Function Over...
56176	CUPS pdftops Filter PDF File Handling Multiple Unspecified Overflows
54808	Poppler JBIG2 Decoder SplashBitmap Handling Overflow
54807	Poppler JBIG2 Decoder CairoOutputDev Handling Overflow
54487	Poppler JBIG2 Decoder PDF File Handling Out-of-bounds Read DoS
54486	Xpdf JBIG2 Decoder PDF File Handling Out-of-bounds Read DoS
54485	CUPS JBIG2 Decoder PDF File Handling Out-of-bounds Read DoS
54484	Poppler JBIG2 Decoder PDF File Handling NULL Dereference DoS
54483	Xpdf JBIG2 Decoder PDF File Handling NULL Dereference DoS
54482	CUPS JBIG2 Decoder PDF File Handling NULL Dereference DoS
54481	Poppler JBIG2 Decoder PDF File Handling Invalid Free Arbitrary Code Execution
54480	Xpdf JBIG2 Decoder PDF File Handling Invalid Free Arbitrary Code Execution
54479	CUPS JBIG2 Decoder PDF File Handling Invalid Free Arbitrary Code Execution
54478	Poppler JBIG2 Decoder PDF File Handling Unspecified Integer Overflow
54477	Xpdf JBIG2 Decoder PDF File Handling Unspecified Integer Overflow
54476	CUPS JBIG2 Decoder PDF File Handling Unspecified Integer Overflow
54473	Poppler JBIG2 Decoder PDF File Handling Multiple Unspecified Input Validation...
54472	Xpdf JBIG2 Decoder PDF File Handling Multiple Unspecified Input Validation Fl...
54471	CUPS JBIG2 Decoder PDF File Handling Multiple Unspecified Input Validation Fl...
54470	Poppler JBIG2 MMR Decoder Crafted PDF Handling Arbitrary Code Execution
54469	Xpdf JBIG2 MMR Decoder Crafted PDF Handling Arbitrary Code Execution
54468	CUPS JBIG2 MMR Decoder Crafted PDF Handling Arbitrary Code Execution
54467	Poppler JBIG2 MMR Decoder Crafted PDF File Handling Infinite Loop DoS
54466	CUPS JBIG2 MMR Decoder Crafted PDF File Handling Infinite Loop DoS
54465	Xpdf JBIG2 MMR Decoder Crafted PDF File Handling Infinite Loop DoS

Type	Count
Oval ID(s)	18
CPE ID(s)	164
osvdb(s)	38

Related	Severity
CVE-2009-3608	(Critical)
CVE-2009-3607	(Critical)
CVE-2009-3606	(Critical)
CVE-2009-3604	(Critical)
CVE-2009-3603	(Critical)
CVE-2009-1182	(High)
CVE-2009-3938	(Medium)
CVE-2009-3605	(Medium)
CVE-2009-1180	(Medium)
CVE-2009-1179	(Medium)
CVE-2009-0800	(Medium)
CVE-2009-0791	(Medium)
CVE-2009-1188	(Medium)
CVE-2009-1187	(Medium)
CVE-2009-3609	(Medium)
CVE-2009-1183	(Medium)
CVE-2009-1181	(Medium)
CVE-2009-0799	(Medium)