Oval Definition:oval:org.mitre.oval:def:9941
Revision Date:2013-04-29Version:12
Title:Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.
Description:Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2009-0147
Platform(s):CentOS Linux 3
CentOS Linux 4
CentOS Linux 5
Oracle Linux 4
Oracle Linux 5
Red Hat Enterprise Linux 3
Red Hat Enterprise Linux 4
Red Hat Enterprise Linux 5
Product(s):
Definition Synopsis
  • OS Section: RHEL3, CentOS3
  • RHEL3 or CentOS3
  • The operating system installed on the system is Red Hat Enterprise Linux 3
  • OR CentOS Linux 3.x
  • AND xpdf is earlier than 1:2.02-14.el3
  • OR OS Section: RHEL4, CentOS4, Oracle Linux 4
  • RHEL4, CentOS4 or Oracle Linux 4
  • The operating system installed on the system is Red Hat Enterprise Linux 4
  • OR CentOS Linux 4.x
  • OR Oracle Linux 4.x
  • AND Configuration section
  • tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16
  • OR kdegraphics-devel is earlier than 7:3.3.1-13.el4
  • OR tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16
  • OR kdegraphics is earlier than 7:3.3.1-13.el4
  • OR tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16
  • OR cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5
  • OR tetex is earlier than 0:2.0.2-22.0.1.EL4.16
  • OR gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4
  • OR cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5
  • OR tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16
  • OR xpdf is earlier than 1:3.00-20.el4
  • OR tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16
  • OR tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16
  • OR cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5
  • OR OS Section: RHEL5, CentOS5, Oracle Linux 5
  • RHEL5, CentOS5 or Oracle Linux 5
  • The operating system installed on the system is Red Hat Enterprise Linux 5
  • OR The operating system installed on the system is CentOS Linux 5.x
  • OR Oracle Linux 5.x
  • AND Configuration section
  • kdegraphics-devel is earlier than 7:3.5.4-12.el5_3
  • OR cups-lpd is earlier than 1:1.3.7-8.el5_3.4
  • OR tetex-dvips is earlier than 0:3.0-33.8.el5_5.5
  • OR kdegraphics is earlier than 7:3.5.4-12.el5_3
  • OR poppler is earlier than 0:0.5.4-4.4.el5_3.9
  • OR tetex-fonts is earlier than 0:3.0-33.8.el5_5.5
  • OR cups-libs is earlier than 1:1.3.7-8.el5_3.4
  • OR tetex is earlier than 0:3.0-33.8.el5_5.5
  • OR tetex-doc is earlier than 0:3.0-33.8.el5_5.5
  • OR poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9
  • OR tetex-latex is earlier than 0:3.0-33.8.el5_5.5
  • OR poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9
  • OR cups-devel is earlier than 1:1.3.7-8.el5_3.4
  • OR tetex-afm is earlier than 0:3.0-33.8.el5_5.5
  • OR tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5
  • OR cups is earlier than 1:1.3.7-8.el5_3.4
  • BACK