CVE-2009-0147

Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a…

published April 23, 2009

CVSS
—
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02577 · 85.1th percentile
Published
2009-04-23T17:00Z
EPSS history
Timeline
  • 23 APR 17:00Z
    Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a…
    cvelistv5