xpdf/poppler: ImageStream:: ImageStream integer overflow

🗓️ 06 May 2010 19:05:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 4 Views

Integer overflow in ImageStream causes crash via crafted pdf triggering NULL dereference.

Reporter	Title	Published	Views	Family All 308
ALT Linux	Security fix for the ALT Linux 5 package xpdf version 3.02-alt7	15 Nov 200900:00	–	altlinux
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	3	i386	tetex	0:1.0.7-67.19	tetex-0:1.0.7-67.19.i386.rpm
Red Hat Enterprise Linux	3	ia64	tetex	0:1.0.7-67.19	tetex-0:1.0.7-67.19.ia64.rpm
Red Hat Enterprise Linux	3	ppc	tetex	0:1.0.7-67.19	tetex-0:1.0.7-67.19.ppc.rpm
Red Hat Enterprise Linux	3	s390	tetex	0:1.0.7-67.19	tetex-0:1.0.7-67.19.s390.rpm
Red Hat Enterprise Linux	3	s390x	tetex	0:1.0.7-67.19	tetex-0:1.0.7-67.19.s390x.rpm
Red Hat Enterprise Linux	3	x86_64	tetex	0:1.0.7-67.19	tetex-0:1.0.7-67.19.x86_64.rpm
Red Hat Enterprise Linux	3	i386	tetex-afm	0:1.0.7-67.19	tetex-afm-0:1.0.7-67.19.i386.rpm
Red Hat Enterprise Linux	3	ia64	tetex-afm	0:1.0.7-67.19	tetex-afm-0:1.0.7-67.19.ia64.rpm
Red Hat Enterprise Linux	3	ppc	tetex-afm	0:1.0.7-67.19	tetex-afm-0:1.0.7-67.19.ppc.rpm
Red Hat Enterprise Linux	3	s390	tetex-afm	0:1.0.7-67.19	tetex-afm-0:1.0.7-67.19.s390.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2009-3609
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2009-3609
cve	www.cve.org/CVERecord

25 Jun 2026 10:36Current

6Medium risk

Vulners AI Score6

CVSS 24.3

EPSS0.04483

image stream overflow pdf vulnerability denial of service null pointer dereference buffer overread xpdf poppler kde graphics kpdf cups pdftops