Lucene search

Ubuntu.comUB:CVE-2009-0165

HistoryApr 23, 2009 - 12:00 a.m.

CVE-2009-0165

2009-04-2300:00:00

ubuntu.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

72.2%

JSON

Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used
in Poppler and other products, when running on Mac OS X, has unspecified
impact, related to “g*allocn.”

Notes

Author	Note
jdstrand	per mdeslaur, poppler and xpdf not-affected
sbeattie	ipe uses system pdflatex
ccdm94	poppler 0.67.0 and forward uses xpdf 3.03+.

OSVersionArchitecturePackageVersionFilename
ubuntu9.04noarchkoffice< 1:1.6.3-7ubuntu6.1UNKNOWN
ubuntu9.04noarchxpdf< 3.02-1.4ubuntu2.9.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	9.04	noarch	koffice	< 1:1.6.3-7ubuntu6.1	UNKNOWN
ubuntu	9.04	noarch	xpdf	< 3.02-1.4ubuntu2.9.04.1	UNKNOWN

References

launchpad.net/bugs/cve/CVE-2009-0165

nvd.nist.gov/vuln/detail/CVE-2009-0165

security-tracker.debian.org/tracker/CVE-2009-0165

ubuntu.com/security/notices/USN-973-1

www.cve.org/CVERecord?id=CVE-2009-0165

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

72.2%

JSON

Related for UB:CVE-2009-0165