CVE-2009-3609

Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and…

published October 21, 2009

CVSS
—
EPSS
5%
Percentile
91.7
In the wild
Unconfirmed
What it is

Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04665 · 91.7th percentile
Published
2009-10-21T17:00Z
EPSS history
Timeline
  • 21 OCT 17:00Z
    Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and…
    cvelistv5