Security Advisory

CVE-2009-0147

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-04-23 17:00:00
Last updated 2024-08-07 04:24:18
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.