CVE-2009-0791 Integer overflow in n/a
Remote attackers can execute arbitrary code or cause denial of service via crafted PDF files exploiting integer overflows in Xpdf and Poppler libraries.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2009-0791?
CVE-2009-0791 is a medium-severity vulnerability in Apple Cups, published on 9 Jun 2009. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179.
Weakness: CWE-189
Which versions are affected by CVE-2009-0791?
It affects 1 product.
Products include Apple Cups.
How do I fix CVE-2009-0791?
Upgrade to a fixed version.
Is CVE-2009-0791 being exploited?
There is no known exploitation of CVE-2009-0791 in the wild and no public exploit code.
Other vulnerabilities in Apple Cups
Sources
Also known as DEBIAN-CVE-2009-0791, GHSA-89xf-5fpv-6xg6.