CVE-2009-0147 : Detail

CVE-2009-0147

2.26%V4
Network
2009-04-23
15h00 +00:00
2018-10-11
17h57 +00:00
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE-189 Category : Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.

Metrics

Metrics Score Severity CVSS Vector Source
V2 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Products Mentioned

Configuraton 0

Foolabs>>Xpdf >> Version 0.5a

    Foolabs>>Xpdf >> Version 0.7a

      Foolabs>>Xpdf >> Version 0.91a

        Foolabs>>Xpdf >> Version 0.91b

          Foolabs>>Xpdf >> Version 0.91c

            Foolabs>>Xpdf >> Version 0.92a

              Foolabs>>Xpdf >> Version 0.92b

                Foolabs>>Xpdf >> Version 0.92c

                  Foolabs>>Xpdf >> Version 0.92d

                    Foolabs>>Xpdf >> Version 0.92e

                      Foolabs>>Xpdf >> Version 0.93a

                        Foolabs>>Xpdf >> Version 0.93b

                          Foolabs>>Xpdf >> Version 0.93c

                            Foolabs>>Xpdf >> Version 1.00a

                              Glyphandcog>>Xpdfreader >> Version To (including) 3.02

                              Glyphandcog>>Xpdfreader >> Version 0.2

                              Glyphandcog>>Xpdfreader >> Version 0.3

                              Glyphandcog>>Xpdfreader >> Version 0.4

                              Glyphandcog>>Xpdfreader >> Version 0.5

                              Glyphandcog>>Xpdfreader >> Version 0.6

                              Glyphandcog>>Xpdfreader >> Version 0.7

                              Glyphandcog>>Xpdfreader >> Version 0.80

                              Glyphandcog>>Xpdfreader >> Version 0.90

                              Glyphandcog>>Xpdfreader >> Version 0.91

                              Glyphandcog>>Xpdfreader >> Version 0.92

                              Glyphandcog>>Xpdfreader >> Version 0.93

                              Glyphandcog>>Xpdfreader >> Version 1.00

                              Glyphandcog>>Xpdfreader >> Version 1.01

                              Glyphandcog>>Xpdfreader >> Version 2.00

                              Glyphandcog>>Xpdfreader >> Version 2.01

                              Glyphandcog>>Xpdfreader >> Version 2.02

                              Glyphandcog>>Xpdfreader >> Version 2.03

                              Glyphandcog>>Xpdfreader >> Version 3.00

                              Glyphandcog>>Xpdfreader >> Version 3.01

                              Configuraton 0

                              Apple>>Cups >> Version To (including) 1.3.9

                              Apple>>Cups >> Version 1.1

                              Apple>>Cups >> Version 1.1.1

                              Apple>>Cups >> Version 1.1.2

                              Apple>>Cups >> Version 1.1.3

                              Apple>>Cups >> Version 1.1.4

                              Apple>>Cups >> Version 1.1.5

                              Apple>>Cups >> Version 1.1.5-1

                              Apple>>Cups >> Version 1.1.5-2

                              Apple>>Cups >> Version 1.1.6

                              Apple>>Cups >> Version 1.1.6-1

                              Apple>>Cups >> Version 1.1.6-2

                              Apple>>Cups >> Version 1.1.6-3

                              Apple>>Cups >> Version 1.1.7

                              Apple>>Cups >> Version 1.1.8

                              Apple>>Cups >> Version 1.1.9

                              Apple>>Cups >> Version 1.1.9-1

                              Apple>>Cups >> Version 1.1.10

                              Apple>>Cups >> Version 1.1.10-1

                              Apple>>Cups >> Version 1.1.11

                              Apple>>Cups >> Version 1.1.12

                              Apple>>Cups >> Version 1.1.13

                              Apple>>Cups >> Version 1.1.14

                              Apple>>Cups >> Version 1.1.15

                              Apple>>Cups >> Version 1.1.16

                              Apple>>Cups >> Version 1.1.17

                              Apple>>Cups >> Version 1.1.18

                              Apple>>Cups >> Version 1.1.19

                              Apple>>Cups >> Version 1.1.19

                              Apple>>Cups >> Version 1.1.19

                              Apple>>Cups >> Version 1.1.19

                              Apple>>Cups >> Version 1.1.19

                              Apple>>Cups >> Version 1.1.19

                              Apple>>Cups >> Version 1.1.20

                              Apple>>Cups >> Version 1.1.20

                              Apple>>Cups >> Version 1.1.20

                              Apple>>Cups >> Version 1.1.20

                              Apple>>Cups >> Version 1.1.20

                              Apple>>Cups >> Version 1.1.20

                              Apple>>Cups >> Version 1.1.20

                              Apple>>Cups >> Version 1.1.21

                              Apple>>Cups >> Version 1.1.21

                              Apple>>Cups >> Version 1.1.21

                              Apple>>Cups >> Version 1.1.22

                              Apple>>Cups >> Version 1.1.22

                              Apple>>Cups >> Version 1.1.22

                              Apple>>Cups >> Version 1.1.23

                              Apple>>Cups >> Version 1.1.23

                              Apple>>Cups >> Version 1.2.0

                              Apple>>Cups >> Version 1.2.1

                              Apple>>Cups >> Version 1.2.2

                              Apple>>Cups >> Version 1.2.3

                              Apple>>Cups >> Version 1.2.4

                              Apple>>Cups >> Version 1.2.5

                              Apple>>Cups >> Version 1.2.6

                              Apple>>Cups >> Version 1.2.7

                              Apple>>Cups >> Version 1.2.8

                              Apple>>Cups >> Version 1.2.9

                              Apple>>Cups >> Version 1.2.10

                              Apple>>Cups >> Version 1.2.11

                              Apple>>Cups >> Version 1.2.12

                              Apple>>Cups >> Version 1.3.0

                              Apple>>Cups >> Version 1.3.1

                              Apple>>Cups >> Version 1.3.2

                              Apple>>Cups >> Version 1.3.3

                              Apple>>Cups >> Version 1.3.4

                              Apple>>Cups >> Version 1.3.5

                              Apple>>Cups >> Version 1.3.6

                              Apple>>Cups >> Version 1.3.7

                              Apple>>Cups >> Version 1.3.8

                              Apple>>Cups >> Version 1.3.10

                              Apple>>Cups >> Version 1.3.11

                              References

                              http://www.debian.org/security/2009/dsa-1793
                              Tags : vendor-advisory, x_refsource_DEBIAN
                              http://security.gentoo.org/glsa/glsa-200904-20.xml
                              Tags : vendor-advisory, x_refsource_GENTOO
                              http://secunia.com/advisories/34963
                              Tags : third-party-advisory, x_refsource_SECUNIA
                              http://support.apple.com/kb/HT3639
                              Tags : x_refsource_CONFIRM
                              http://www.debian.org/security/2009/dsa-1790
                              Tags : vendor-advisory, x_refsource_DEBIAN
                              http://secunia.com/advisories/35037
                              Tags : third-party-advisory, x_refsource_SECUNIA
                              http://www.vupen.com/english/advisories/2009/1077
                              Tags : vdb-entry, x_refsource_VUPEN
                              http://www.vupen.com/english/advisories/2009/1621
                              Tags : vdb-entry, x_refsource_VUPEN
                              http://support.apple.com/kb/HT3549
                              Tags : x_refsource_CONFIRM
                              http://secunia.com/advisories/35064
                              Tags : third-party-advisory, x_refsource_SECUNIA
                              http://www.vupen.com/english/advisories/2009/1066
                              Tags : vdb-entry, x_refsource_VUPEN
                              http://secunia.com/advisories/34481
                              Tags : third-party-advisory, x_refsource_SECUNIA
                              http://www.redhat.com/support/errata/RHSA-2009-0431.html
                              Tags : vendor-advisory, x_refsource_REDHAT
                              http://www.vupen.com/english/advisories/2009/1065
                              Tags : vdb-entry, x_refsource_VUPEN
                              http://secunia.com/advisories/35074
                              Tags : third-party-advisory, x_refsource_SECUNIA
                              http://www.redhat.com/support/errata/RHSA-2009-0430.html
                              Tags : vendor-advisory, x_refsource_REDHAT
                              http://secunia.com/advisories/35618
                              Tags : third-party-advisory, x_refsource_SECUNIA
                              http://secunia.com/advisories/35065
                              Tags : third-party-advisory, x_refsource_SECUNIA
                              http://www.redhat.com/support/errata/RHSA-2009-0480.html
                              Tags : vendor-advisory, x_refsource_REDHAT
                              http://www.securityfocus.com/bid/34568
                              Tags : vdb-entry, x_refsource_BID
                              http://www.vupen.com/english/advisories/2010/1040
                              Tags : vdb-entry, x_refsource_VUPEN
                              http://rhn.redhat.com/errata/RHSA-2009-0458.html
                              Tags : vendor-advisory, x_refsource_REDHAT
                              http://secunia.com/advisories/34991
                              Tags : third-party-advisory, x_refsource_SECUNIA
                              http://www.mandriva.com/security/advisories?name=MDVSA-2009:101
                              Tags : vendor-advisory, x_refsource_MANDRIVA
                              http://www.mandriva.com/security/advisories?name=MDVSA-2010:087
                              Tags : vendor-advisory, x_refsource_MANDRIVA
                              http://www.us-cert.gov/cas/techalerts/TA09-133A.html
                              Tags : third-party-advisory, x_refsource_CERT
                              http://secunia.com/advisories/35685
                              Tags : third-party-advisory, x_refsource_SECUNIA
                              http://secunia.com/advisories/34756
                              Tags : third-party-advisory, x_refsource_SECUNIA
                              http://secunia.com/advisories/34291
                              Tags : third-party-advisory, x_refsource_SECUNIA
                              http://secunia.com/advisories/34755
                              Tags : third-party-advisory, x_refsource_SECUNIA
                              http://www.vupen.com/english/advisories/2009/1297
                              Tags : vdb-entry, x_refsource_VUPEN
                              http://secunia.com/advisories/34852
                              Tags : third-party-advisory, x_refsource_SECUNIA
                              http://secunia.com/advisories/34959
                              Tags : third-party-advisory, x_refsource_SECUNIA
                              http://www.redhat.com/support/errata/RHSA-2009-0429.html
                              Tags : vendor-advisory, x_refsource_REDHAT
                              http://www.securitytracker.com/id?1022073
                              Tags : vdb-entry, x_refsource_SECTRACK