xpdf/poppler: Splash:: drawImage integer overflow and missing allocation return value check

🗓️ 15 Oct 2009 08:45:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 2 Views

Splash drawImage in Xpdf and Poppler lacks allocation check, causing crashes or code execution.

Reporter	Title	Published	Views	Family All 190
ALT Linux	Security fix for the ALT Linux 5 package xpdf version 3.02-alt7	15 Nov 200900:00	–	altlinux
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	4	i386	gpdf	0:2.8.2-7.7.2.el4_8.5	gpdf-0:2.8.2-7.7.2.el4_8.5.i386.rpm
Red Hat Enterprise Linux	4	ia64	gpdf	0:2.8.2-7.7.2.el4_8.5	gpdf-0:2.8.2-7.7.2.el4_8.5.ia64.rpm
Red Hat Enterprise Linux	4	ppc	gpdf	0:2.8.2-7.7.2.el4_8.5	gpdf-0:2.8.2-7.7.2.el4_8.5.ppc.rpm
Red Hat Enterprise Linux	4	s390	gpdf	0:2.8.2-7.7.2.el4_8.5	gpdf-0:2.8.2-7.7.2.el4_8.5.s390.rpm
Red Hat Enterprise Linux	4	s390x	gpdf	0:2.8.2-7.7.2.el4_8.5	gpdf-0:2.8.2-7.7.2.el4_8.5.s390x.rpm
Red Hat Enterprise Linux	4	x86_64	gpdf	0:2.8.2-7.7.2.el4_8.5	gpdf-0:2.8.2-7.7.2.el4_8.5.x86_64.rpm
Red Hat Enterprise Linux	4	i386	gpdf-debuginfo	0:2.8.2-7.7.2.el4_8.5	gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.i386.rpm
Red Hat Enterprise Linux	4	ia64	gpdf-debuginfo	0:2.8.2-7.7.2.el4_8.5	gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ia64.rpm
Red Hat Enterprise Linux	4	ppc	gpdf-debuginfo	0:2.8.2-7.7.2.el4_8.5	gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.ppc.rpm
Red Hat Enterprise Linux	4	s390	gpdf-debuginfo	0:2.8.2-7.7.2.el4_8.5	gpdf-debuginfo-0:2.8.2-7.7.2.el4_8.5.s390.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2009-3604
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2009-3604
cve	www.cve.org/CVERecord

25 Jun 2026 10:36Current

6.5Medium risk

Vulners AI Score6.5

CVSS 29.3

EPSS0.08703

image rendering memory allocation integer overflow null dereference heap overflow denial of service remote code execution pdf vulnerability