CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-3608

Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.062

EPSS Ranking 90.3%

CVSS Severity

CVSS v2 Score 9.3

References

Products affected by CVE-2009-3608

Foolabs » Xpdf » Version: 3.02pl1

cpe:2.3:a:foolabs:xpdf:3.02pl1
Foolabs » Xpdf » Version: 3.02pl2

cpe:2.3:a:foolabs:xpdf:3.02pl2
Foolabs » Xpdf » Version: 3.02pl3

cpe:2.3:a:foolabs:xpdf:3.02pl3
Glyph And Cog » Pdftops » Version: Any

cpe:2.3:a:glyph_and_cog:pdftops:*
Glyphandcog » Xpdfreader » Version: 3.00

cpe:2.3:a:glyphandcog:xpdfreader:3.00
Glyphandcog » Xpdfreader » Version: 3.01

cpe:2.3:a:glyphandcog:xpdfreader:3.01
Glyphandcog » Xpdfreader » Version: 3.02

cpe:2.3:a:glyphandcog:xpdfreader:3.02
Gnome » Gpdf » Version: Any

cpe:2.3:a:gnome:gpdf:*
Kde » Kpdf » Version: Any

cpe:2.3:a:kde:kpdf:*
Poppler » Poppler » Version: Any

cpe:2.3:a:poppler:poppler:*
Poppler » Poppler » Version: 0.1

cpe:2.3:a:poppler:poppler:0.1
Poppler » Poppler » Version: 0.1.1

cpe:2.3:a:poppler:poppler:0.1.1
Poppler » Poppler » Version: 0.1.2

cpe:2.3:a:poppler:poppler:0.1.2
Poppler » Poppler » Version: 0.10.0

cpe:2.3:a:poppler:poppler:0.10.0
Poppler » Poppler » Version: 0.10.1

cpe:2.3:a:poppler:poppler:0.10.1
Poppler » Poppler » Version: 0.10.2

cpe:2.3:a:poppler:poppler:0.10.2
Poppler » Poppler » Version: 0.10.3

cpe:2.3:a:poppler:poppler:0.10.3
Poppler » Poppler » Version: 0.10.4

cpe:2.3:a:poppler:poppler:0.10.4
Poppler » Poppler » Version: 0.10.5

cpe:2.3:a:poppler:poppler:0.10.5
Poppler » Poppler » Version: 0.10.6

cpe:2.3:a:poppler:poppler:0.10.6
Poppler » Poppler » Version: 0.10.7

cpe:2.3:a:poppler:poppler:0.10.7
Poppler » Poppler » Version: 0.11.0

cpe:2.3:a:poppler:poppler:0.11.0
Poppler » Poppler » Version: 0.11.1

cpe:2.3:a:poppler:poppler:0.11.1
Poppler » Poppler » Version: 0.11.2

cpe:2.3:a:poppler:poppler:0.11.2
Poppler » Poppler » Version: 0.11.3

cpe:2.3:a:poppler:poppler:0.11.3
Poppler » Poppler » Version: 0.2.0

cpe:2.3:a:poppler:poppler:0.2.0
Poppler » Poppler » Version: 0.3.0

cpe:2.3:a:poppler:poppler:0.3.0
Poppler » Poppler » Version: 0.3.1

cpe:2.3:a:poppler:poppler:0.3.1
Poppler » Poppler » Version: 0.3.2

cpe:2.3:a:poppler:poppler:0.3.2
Poppler » Poppler » Version: 0.3.3

cpe:2.3:a:poppler:poppler:0.3.3
Poppler » Poppler » Version: 0.4.0

cpe:2.3:a:poppler:poppler:0.4.0
Poppler » Poppler » Version: 0.4.1

cpe:2.3:a:poppler:poppler:0.4.1
Poppler » Poppler » Version: 0.4.2

cpe:2.3:a:poppler:poppler:0.4.2
Poppler » Poppler » Version: 0.4.3

cpe:2.3:a:poppler:poppler:0.4.3
Poppler » Poppler » Version: 0.4.4

cpe:2.3:a:poppler:poppler:0.4.4
Poppler » Poppler » Version: 0.5.0

cpe:2.3:a:poppler:poppler:0.5.0
Poppler » Poppler » Version: 0.5.1

cpe:2.3:a:poppler:poppler:0.5.1
Poppler » Poppler » Version: 0.5.2

cpe:2.3:a:poppler:poppler:0.5.2
Poppler » Poppler » Version: 0.5.3

cpe:2.3:a:poppler:poppler:0.5.3
Poppler » Poppler » Version: 0.5.4

cpe:2.3:a:poppler:poppler:0.5.4
Poppler » Poppler » Version: 0.5.9

cpe:2.3:a:poppler:poppler:0.5.9
Poppler » Poppler » Version: 0.6.0

cpe:2.3:a:poppler:poppler:0.6.0
Poppler » Poppler » Version: 0.6.1

cpe:2.3:a:poppler:poppler:0.6.1
Poppler » Poppler » Version: 0.6.2

cpe:2.3:a:poppler:poppler:0.6.2
Poppler » Poppler » Version: 0.6.3

cpe:2.3:a:poppler:poppler:0.6.3
Poppler » Poppler » Version: 0.6.4

cpe:2.3:a:poppler:poppler:0.6.4
Poppler » Poppler » Version: 0.7.0

cpe:2.3:a:poppler:poppler:0.7.0
Poppler » Poppler » Version: 0.7.1

cpe:2.3:a:poppler:poppler:0.7.1
Poppler » Poppler » Version: 0.7.2

cpe:2.3:a:poppler:poppler:0.7.2
Poppler » Poppler » Version: 0.7.3

cpe:2.3:a:poppler:poppler:0.7.3
Poppler » Poppler » Version: 0.8.0

cpe:2.3:a:poppler:poppler:0.8.0
Poppler » Poppler » Version: 0.8.1

cpe:2.3:a:poppler:poppler:0.8.1
Poppler » Poppler » Version: 0.8.2

cpe:2.3:a:poppler:poppler:0.8.2
Poppler » Poppler » Version: 0.8.3

cpe:2.3:a:poppler:poppler:0.8.3
Poppler » Poppler » Version: 0.8.4

cpe:2.3:a:poppler:poppler:0.8.4
Poppler » Poppler » Version: 0.8.6

cpe:2.3:a:poppler:poppler:0.8.6
Poppler » Poppler » Version: 0.8.7

cpe:2.3:a:poppler:poppler:0.8.7
Poppler » Poppler » Version: 0.9.0

cpe:2.3:a:poppler:poppler:0.9.0
Poppler » Poppler » Version: 0.9.1

cpe:2.3:a:poppler:poppler:0.9.1
Poppler » Poppler » Version: 0.9.2

cpe:2.3:a:poppler:poppler:0.9.2
Poppler » Poppler » Version: 0.9.3

cpe:2.3:a:poppler:poppler:0.9.3
Tetex » Tetex » Version: Any

cpe:2.3:a:tetex:tetex:*

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-3608

Products

Pricing

Contact Us