Vulnerability-Lookup

CVE-2009-0195 (GCVE-0-2009-0195)

Vulnerability from cvelistv5 – Published: 2009-04-23 17:00 – Updated: 2024-08-07 04:24

Summary

Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.

Severity

No CVSS data available.

CWE

Assigner

flexera mitre root

References

15 references

URL	Tags
http://secunia.com/secunia_research/2009-18/	x_refsource_MISC
http://secunia.com/advisories/34963	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/35064	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34481	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/502759/100…	mailing-listx_refsource_BUGTRAQ
http://www.redhat.com/support/errata/RHSA-2009-04…	vendor-advisoryx_refsource_REDHAT
http://www.vupen.com/english/advisories/2010/1040	vdb-entryx_refsource_VUPEN
http://rhn.redhat.com/errata/RHSA-2009-0458.html	vendor-advisoryx_refsource_REDHAT
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/34756	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34291	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/502762/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/secunia_research/2009-17/	x_refsource_MISC
http://www.securityfocus.com/bid/34791	vdb-entryx_refsource_BID

Date Public

2009-04-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:24:18.218Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://secunia.com/secunia_research/2009-18/"
          },
          {
            "name": "34963",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34963"
          },
          {
            "name": "35064",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35064"
          },
          {
            "name": "34481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34481"
          },
          {
            "name": "20090417 Secunia Research: CUPS pdftops JBIG2 Symbol Dictionary Buffer Overflow",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/502759/100/0/threaded"
          },
          {
            "name": "RHSA-2009:0480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
          },
          {
            "name": "ADV-2010-1040",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1040"
          },
          {
            "name": "RHSA-2009:0458",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10076",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076"
          },
          {
            "name": "MDVSA-2010:087",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
          },
          {
            "name": "34756",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34756"
          },
          {
            "name": "34291",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34291"
          },
          {
            "name": "20090417 Secunia Research: Xpdf JBIG2 Symbol Dictionary Buffer Overflow Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/502762/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://secunia.com/secunia_research/2009-17/"
          },
          {
            "name": "34791",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34791"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-04-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01.000Z",
        "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
        "shortName": "flexera"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://secunia.com/secunia_research/2009-18/"
        },
        {
          "name": "34963",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34963"
        },
        {
          "name": "35064",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35064"
        },
        {
          "name": "34481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34481"
        },
        {
          "name": "20090417 Secunia Research: CUPS pdftops JBIG2 Symbol Dictionary Buffer Overflow",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/502759/100/0/threaded"
        },
        {
          "name": "RHSA-2009:0480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
        },
        {
          "name": "ADV-2010-1040",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1040"
        },
        {
          "name": "RHSA-2009:0458",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10076",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076"
        },
        {
          "name": "MDVSA-2010:087",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
        },
        {
          "name": "34756",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34756"
        },
        {
          "name": "34291",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34291"
        },
        {
          "name": "20090417 Secunia Research: Xpdf JBIG2 Symbol Dictionary Buffer Overflow Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/502762/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://secunia.com/secunia_research/2009-17/"
        },
        {
          "name": "34791",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34791"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "PSIRT-CNA@flexerasoftware.com",
          "ID": "CVE-2009-0195",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://secunia.com/secunia_research/2009-18/",
              "refsource": "MISC",
              "url": "http://secunia.com/secunia_research/2009-18/"
            },
            {
              "name": "34963",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34963"
            },
            {
              "name": "35064",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35064"
            },
            {
              "name": "34481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34481"
            },
            {
              "name": "20090417 Secunia Research: CUPS pdftops JBIG2 Symbol Dictionary Buffer Overflow",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/502759/100/0/threaded"
            },
            {
              "name": "RHSA-2009:0480",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
            },
            {
              "name": "ADV-2010-1040",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1040"
            },
            {
              "name": "RHSA-2009:0458",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
            },
            {
              "name": "oval:org.mitre.oval:def:10076",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076"
            },
            {
              "name": "MDVSA-2010:087",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
            },
            {
              "name": "34756",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34756"
            },
            {
              "name": "34291",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34291"
            },
            {
              "name": "20090417 Secunia Research: Xpdf JBIG2 Symbol Dictionary Buffer Overflow Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/502762/100/0/threaded"
            },
            {
              "name": "http://secunia.com/secunia_research/2009-17/",
              "refsource": "MISC",
              "url": "http://secunia.com/secunia_research/2009-17/"
            },
            {
              "name": "34791",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/34791"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
    "assignerShortName": "flexera",
    "cveId": "CVE-2009-0195",
    "datePublished": "2009-04-23T17:00:00.000Z",
    "dateReserved": "2009-01-20T00:00:00.000Z",
    "dateUpdated": "2024-08-07T04:24:18.218Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2009-0195",
      "date": "2026-09-15",
      "epss": "0.05374",
      "percentile": "0.92215"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:cups:1.3.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7C671B95-8892-4D71-87FE-BABF5CBEC144\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B8ABE533-8FC1-45E6-B574-A4CC7571EF7C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1B02805E-7BD0-4563-82C8-6FFB982D4913\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"852F526D-F388-4FF0-BDD9-DF7635DB46D8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"478D53EA-CC8C-4ECB-8410-0910505AD819\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8C84FB90-FF1C-4502-B2D2-390438DD422F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"13341DAE-D16D-41A7-BF17-FEC802997B15\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3E30BAEA-231C-4A82-B014-9EE3D1E81545\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FE1DE5A5-6448-43F6-A612-56998D16E6B9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"35F84699-D4CF-4FD1-A959-53E316559EBE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D820DFD5-0EF9-4C9A-B281-D553A4F63141\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E2EFC7E4-E513-42DB-BDA5-8D1E497971DD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4CF839D-D034-4D47-977F-7E27B36EF04F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F3B3E8A4-14FE-42DA-B82E-839B092B5302\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:foolabs:xpdf:3.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"52D79ABD-202F-464F-B6C3-B225FD37DD3F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"3.02\", \"matchCriteriaId\": \"32628280-E2DB-45E0-AB8A-CFC90419A182\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DEF5EC54-9145-4B51-8241-C9343160BF80\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D1344DF7-9917-4DB0-9256-9E8131C55B0A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"309F0CF2-4AF7-4F46-91EA-39BA07BAF312\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"36FA872B-74B8-48E4-9D5C-5ACA6FCB8026\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"20311EDE-0E34-432A-AE41-F61EA68F134A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"16FEF460-3569-4294-ABA4-D7C251D67071\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BB41E8C2-BBCC-48CB-805B-23411D39E936\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"16670F8A-E70B-4CDF-8C61-414D86E20C84\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"69483A91-53DB-4736-908F-7B14EFB40888\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5B3E7962-0A95-4E7B-A983-683B02350B93\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BD1120B3-3372-417B-BCA0-FD515638FBFB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F7397645-3225-4980-8465-28F93322B58B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D5A45EAF-B511-4360-A201-D588E7EEB39D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D14637F7-DC99-4AC4-854C-DBA0B4C6BE54\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"15D08CFD-BEE1-4DEE-926D-F4291F88224D\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.\"}, {\"lang\": \"es\", \"value\": \"Desbordamiento de b\\u00fafer basado en mont\\u00edculo en Xpdf v3.02p12 y anteriores, CUPS v1.3.9 y probablemente otros productos, permite a atacantes remotos ejecutar c\\u00f3digo de forma arbitraria a trav\\u00e9s de un fichero PDF con segmentos JBIG2 de diccionario simb\\u00f3lico manipulados.\"}]",
      "id": "CVE-2009-0195",
      "lastModified": "2024-11-21T00:59:19.517",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:P/I:P/A:P\", \"baseScore\": 6.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
      "published": "2009-04-23T17:30:01.627",
      "references": "[{\"url\": \"http://rhn.redhat.com/errata/RHSA-2009-0458.html\", \"source\": \"PSIRT-CNA@flexerasoftware.com\"}, {\"url\": \"http://secunia.com/advisories/34291\", \"source\": \"PSIRT-CNA@flexerasoftware.com\"}, {\"url\": \"http://secunia.com/advisories/34481\", \"source\": \"PSIRT-CNA@flexerasoftware.com\"}, {\"url\": \"http://secunia.com/advisories/34756\", \"source\": \"PSIRT-CNA@flexerasoftware.com\"}, {\"url\": \"http://secunia.com/advisories/34963\", \"source\": \"PSIRT-CNA@flexerasoftware.com\"}, {\"url\": \"http://secunia.com/advisories/35064\", \"source\": \"PSIRT-CNA@flexerasoftware.com\"}, {\"url\": \"http://secunia.com/secunia_research/2009-17/\", \"source\": \"PSIRT-CNA@flexerasoftware.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/secunia_research/2009-18/\", \"source\": \"PSIRT-CNA@flexerasoftware.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087\", \"source\": \"PSIRT-CNA@flexerasoftware.com\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2009-0480.html\", \"source\": \"PSIRT-CNA@flexerasoftware.com\"}, {\"url\": \"http://www.securityfocus.com/archive/1/502759/100/0/threaded\", \"source\": \"PSIRT-CNA@flexerasoftware.com\"}, {\"url\": \"http://www.securityfocus.com/archive/1/502762/100/0/threaded\", \"source\": \"PSIRT-CNA@flexerasoftware.com\"}, {\"url\": \"http://www.securityfocus.com/bid/34791\", \"source\": \"PSIRT-CNA@flexerasoftware.com\"}, {\"url\": \"http://www.vupen.com/english/advisories/2010/1040\", \"source\": \"PSIRT-CNA@flexerasoftware.com\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076\", \"source\": \"PSIRT-CNA@flexerasoftware.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2009-0458.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/34291\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/34481\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/34756\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/34963\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/35064\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/secunia_research/2009-17/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/secunia_research/2009-18/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2009-0480.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/archive/1/502759/100/0/threaded\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/archive/1/502762/100/0/threaded\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/34791\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.vupen.com/english/advisories/2010/1040\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-119\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2009-0195\",\"sourceIdentifier\":\"PSIRT-CNA@flexerasoftware.com\",\"published\":\"2009-04-23T17:30:01.627\",\"lastModified\":\"2026-04-23T00:35:47.467\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.\"},{\"lang\":\"es\",\"value\":\"Desbordamiento de b\u00fafer basado en mont\u00edculo en Xpdf v3.02p12 y anteriores, CUPS v1.3.9 y probablemente otros productos, permite a atacantes remotos ejecutar c\u00f3digo de forma arbitraria a trav\u00e9s de un fichero PDF con segmentos JBIG2 de diccionario simb\u00f3lico manipulados.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:cups:1.3.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7C671B95-8892-4D71-87FE-BABF5CBEC144\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8ABE533-8FC1-45E6-B574-A4CC7571EF7C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B02805E-7BD0-4563-82C8-6FFB982D4913\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"852F526D-F388-4FF0-BDD9-DF7635DB46D8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"478D53EA-CC8C-4ECB-8410-0910505AD819\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C84FB90-FF1C-4502-B2D2-390438DD422F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"13341DAE-D16D-41A7-BF17-FEC802997B15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E30BAEA-231C-4A82-B014-9EE3D1E81545\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE1DE5A5-6448-43F6-A612-56998D16E6B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"35F84699-D4CF-4FD1-A959-53E316559EBE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D820DFD5-0EF9-4C9A-B281-D553A4F63141\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E2EFC7E4-E513-42DB-BDA5-8D1E497971DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4CF839D-D034-4D47-977F-7E27B36EF04F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F3B3E8A4-14FE-42DA-B82E-839B092B5302\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:foolabs:xpdf:3.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"52D79ABD-202F-464F-B6C3-B225FD37DD3F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"3.02\",\"matchCriteriaId\":\"32628280-E2DB-45E0-AB8A-CFC90419A182\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEF5EC54-9145-4B51-8241-C9343160BF80\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1344DF7-9917-4DB0-9256-9E8131C55B0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"309F0CF2-4AF7-4F46-91EA-39BA07BAF312\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36FA872B-74B8-48E4-9D5C-5ACA6FCB8026\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"20311EDE-0E34-432A-AE41-F61EA68F134A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16FEF460-3569-4294-ABA4-D7C251D67071\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB41E8C2-BBCC-48CB-805B-23411D39E936\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16670F8A-E70B-4CDF-8C61-414D86E20C84\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"69483A91-53DB-4736-908F-7B14EFB40888\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B3E7962-0A95-4E7B-A983-683B02350B93\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD1120B3-3372-417B-BCA0-FD515638FBFB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7397645-3225-4980-8465-28F93322B58B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5A45EAF-B511-4360-A201-D588E7EEB39D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D14637F7-DC99-4AC4-854C-DBA0B4C6BE54\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15D08CFD-BEE1-4DEE-926D-F4291F88224D\"}]}]}],\"references\":[{\"url\":\"http://rhn.redhat.com/errata/RHSA-2009-0458.html\",\"source\":\"PSIRT-CNA@flexerasoftware.com\"},{\"url\":\"http://secunia.com/advisories/34291\",\"source\":\"PSIRT-CNA@flexerasoftware.com\"},{\"url\":\"http://secunia.com/advisories/34481\",\"source\":\"PSIRT-CNA@flexerasoftware.com\"},{\"url\":\"http://secunia.com/advisories/34756\",\"source\":\"PSIRT-CNA@flexerasoftware.com\"},{\"url\":\"http://secunia.com/advisories/34963\",\"source\":\"PSIRT-CNA@flexerasoftware.com\"},{\"url\":\"http://secunia.com/advisories/35064\",\"source\":\"PSIRT-CNA@flexerasoftware.com\"},{\"url\":\"http://secunia.com/secunia_research/2009-17/\",\"source\":\"PSIRT-CNA@flexerasoftware.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/secunia_research/2009-18/\",\"source\":\"PSIRT-CNA@flexerasoftware.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087\",\"source\":\"PSIRT-CNA@flexerasoftware.com\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2009-0480.html\",\"source\":\"PSIRT-CNA@flexerasoftware.com\"},{\"url\":\"http://www.securityfocus.com/archive/1/502759/100/0/threaded\",\"source\":\"PSIRT-CNA@flexerasoftware.com\"},{\"url\":\"http://www.securityfocus.com/archive/1/502762/100/0/threaded\",\"source\":\"PSIRT-CNA@flexerasoftware.com\"},{\"url\":\"http://www.securityfocus.com/bid/34791\",\"source\":\"PSIRT-CNA@flexerasoftware.com\"},{\"url\":\"http://www.vupen.com/english/advisories/2010/1040\",\"source\":\"PSIRT-CNA@flexerasoftware.com\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076\",\"source\":\"PSIRT-CNA@flexerasoftware.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2009-0458.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/34291\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/34481\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/34756\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/34963\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/35064\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/secunia_research/2009-17/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/secunia_research/2009-18/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2009-0480.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/502759/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/502762/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/34791\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2010/1040\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2025-11-21T13:12:15+00:00",
      "cve": "CVE-2009-0195",
      "id": "CVE-2009-0195",
      "initial_release_date": "2009-04-16T00:00:00+00:00",
      "product_status:fixed": "816",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195)",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2009/cve-2009-0195.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2025-07-03T00:33:05Z",
      "cve": "CVE-2009-0195",
      "id": "CVE-2009-0195",
      "initial_release_date": "2023-02-15T06:05:26Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2009-0195",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2009-0195.json",
      "version": "4"
    }
  }
}

CERTA-2009-AVI-156

Vulnerability from certfr_avis - Published: - Updated:

Plusieurs vulnérabilités découvertes dans CUPS permettent à un utilisateur distant malveillant d'exécuter du code arbitraire ou de porter atteinte à la confidentialité des données.

Description

Plusieurs vulnérabilités présentes dans la commande pdftops, causées par l'usage de code source vulnérable issu de Xpdf, peuvent être exploitées afin de provoquer un déni de service ou d'exécuter du code arbitraire à distance.

Une vulnérabilité de type débordement d'entier durant le traitement d'un fichier au format TIFF peut être exploitée au moyen d'un fichier spécialement construit afin d'exécuter du code arbitraire à distance.

Une erreur dans le traitement des en-têtes Host: permet à une personne malveillante de porter atteinte à la confidentialité des données telles que l'historique des travaux d'impression.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	N/A	N/A	CUPS 1.x.

References

Title

Publication Time

CERTA-2009-AVI-156

Vulnerability from certfr_avis - Published: - Updated:

Plusieurs vulnérabilités découvertes dans CUPS permettent à un utilisateur distant malveillant d'exécuter du code arbitraire ou de porter atteinte à la confidentialité des données.

Description

Une erreur dans le traitement des en-têtes Host: permet à une personne malveillante de porter atteinte à la confidentialité des données telles que l'historique des travaux d'impression.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	N/A	N/A	CUPS 1.x.

References

Title

Publication Time

FKIE_CVE-2009-0195

Vulnerability from fkie_nvd - Published: 2009-04-23 17:30 - Updated: 2026-06-16 23:04

Severity

Summary

References

URL	Tags
PSIRT-CNA@flexerasoftware.com	http://rhn.redhat.com/errata/RHSA-2009-0458.html
PSIRT-CNA@flexerasoftware.com	http://secunia.com/advisories/34291
PSIRT-CNA@flexerasoftware.com	http://secunia.com/advisories/34481
PSIRT-CNA@flexerasoftware.com	http://secunia.com/advisories/34756
PSIRT-CNA@flexerasoftware.com	http://secunia.com/advisories/34963
PSIRT-CNA@flexerasoftware.com	http://secunia.com/advisories/35064
PSIRT-CNA@flexerasoftware.com	http://secunia.com/secunia_research/2009-17/	Vendor Advisory
PSIRT-CNA@flexerasoftware.com	http://secunia.com/secunia_research/2009-18/	Vendor Advisory
PSIRT-CNA@flexerasoftware.com	http://www.mandriva.com/security/advisories?name=MDVSA-2010:087
PSIRT-CNA@flexerasoftware.com	http://www.redhat.com/support/errata/RHSA-2009-0480.html
PSIRT-CNA@flexerasoftware.com	http://www.securityfocus.com/archive/1/502759/100/0/threaded
PSIRT-CNA@flexerasoftware.com	http://www.securityfocus.com/archive/1/502762/100/0/threaded
PSIRT-CNA@flexerasoftware.com	http://www.securityfocus.com/bid/34791
PSIRT-CNA@flexerasoftware.com	http://www.vupen.com/english/advisories/2010/1040
PSIRT-CNA@flexerasoftware.com	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2009-0458.html
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/34291
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/34481
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/34756
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/34963
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/35064
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/secunia_research/2009-17/	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/secunia_research/2009-18/	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDVSA-2010:087
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2009-0480.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/502759/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/502762/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/34791
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2010/1040
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076

Impacted products

Vendor	Product	Version
apple	cups	1.3.9
foolabs	xpdf	0.5a
foolabs	xpdf	0.7a
foolabs	xpdf	0.91a
foolabs	xpdf	0.91b
foolabs	xpdf	0.91c
foolabs	xpdf	0.92a
foolabs	xpdf	0.92b
foolabs	xpdf	0.92c
foolabs	xpdf	0.92d
foolabs	xpdf	0.92e
foolabs	xpdf	0.93a
foolabs	xpdf	0.93b
foolabs	xpdf	0.93c
foolabs	xpdf	1.00a
foolabs	xpdf	3.0.1
glyphandcog	xpdfreader	*
glyphandcog	xpdfreader	0.2
glyphandcog	xpdfreader	0.3
glyphandcog	xpdfreader	0.4
glyphandcog	xpdfreader	0.5
glyphandcog	xpdfreader	0.6
glyphandcog	xpdfreader	0.7
glyphandcog	xpdfreader	0.80
glyphandcog	xpdfreader	0.90
glyphandcog	xpdfreader	0.91
glyphandcog	xpdfreader	0.92
glyphandcog	xpdfreader	0.93
glyphandcog	xpdfreader	1.00
glyphandcog	xpdfreader	1.01
glyphandcog	xpdfreader	2.00
glyphandcog	xpdfreader	2.01
glyphandcog	xpdfreader	2.02
glyphandcog	xpdfreader	2.03
glyphandcog	xpdfreader	3.00

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "PSIRT-CNA@flexerasoftware.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apple:cups:1.3.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "7C671B95-8892-4D71-87FE-BABF5CBEC144",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*",
              "matchCriteriaId": "B8ABE533-8FC1-45E6-B574-A4CC7571EF7C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B02805E-7BD0-4563-82C8-6FFB982D4913",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*",
              "matchCriteriaId": "852F526D-F388-4FF0-BDD9-DF7635DB46D8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*",
              "matchCriteriaId": "478D53EA-CC8C-4ECB-8410-0910505AD819",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*",
              "matchCriteriaId": "8C84FB90-FF1C-4502-B2D2-390438DD422F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*",
              "matchCriteriaId": "13341DAE-D16D-41A7-BF17-FEC802997B15",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*",
              "matchCriteriaId": "3E30BAEA-231C-4A82-B014-9EE3D1E81545",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE1DE5A5-6448-43F6-A612-56998D16E6B9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*",
              "matchCriteriaId": "35F84699-D4CF-4FD1-A959-53E316559EBE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*",
              "matchCriteriaId": "D820DFD5-0EF9-4C9A-B281-D553A4F63141",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*",
              "matchCriteriaId": "E2EFC7E4-E513-42DB-BDA5-8D1E497971DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*",
              "matchCriteriaId": "0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*",
              "matchCriteriaId": "F4CF839D-D034-4D47-977F-7E27B36EF04F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*",
              "matchCriteriaId": "F3B3E8A4-14FE-42DA-B82E-839B092B5302",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:foolabs:xpdf:3.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "52D79ABD-202F-464F-B6C3-B225FD37DD3F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "32628280-E2DB-45E0-AB8A-CFC90419A182",
              "versionEndIncluding": "3.02",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "DEF5EC54-9145-4B51-8241-C9343160BF80",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "D1344DF7-9917-4DB0-9256-9E8131C55B0A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "309F0CF2-4AF7-4F46-91EA-39BA07BAF312",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "36FA872B-74B8-48E4-9D5C-5ACA6FCB8026",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "20311EDE-0E34-432A-AE41-F61EA68F134A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*",
              "matchCriteriaId": "16FEF460-3569-4294-ABA4-D7C251D67071",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB41E8C2-BBCC-48CB-805B-23411D39E936",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*",
              "matchCriteriaId": "16670F8A-E70B-4CDF-8C61-414D86E20C84",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*",
              "matchCriteriaId": "69483A91-53DB-4736-908F-7B14EFB40888",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B3E7962-0A95-4E7B-A983-683B02350B93",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD1120B3-3372-417B-BCA0-FD515638FBFB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*",
              "matchCriteriaId": "F7397645-3225-4980-8465-28F93322B58B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*",
              "matchCriteriaId": "1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*",
              "matchCriteriaId": "D5A45EAF-B511-4360-A201-D588E7EEB39D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*",
              "matchCriteriaId": "D14637F7-DC99-4AC4-854C-DBA0B4C6BE54",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*",
              "matchCriteriaId": "9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
              "matchCriteriaId": "15D08CFD-BEE1-4DEE-926D-F4291F88224D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer basado en mont\u00edculo en Xpdf v3.02p12 y anteriores, CUPS v1.3.9 y probablemente otros productos, permite a atacantes remotos ejecutar c\u00f3digo de forma arbitraria a trav\u00e9s de un fichero PDF con segmentos JBIG2 de diccionario simb\u00f3lico manipulados."
    }
  ],
  "id": "CVE-2009-0195",
  "lastModified": "2026-06-16T23:04:28.487",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2009-04-23T17:30:01.627",
  "references": [
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
    },
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "url": "http://secunia.com/advisories/34291"
    },
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "url": "http://secunia.com/advisories/34481"
    },
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "url": "http://secunia.com/advisories/34756"
    },
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "url": "http://secunia.com/advisories/34963"
    },
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "url": "http://secunia.com/advisories/35064"
    },
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/secunia_research/2009-17/"
    },
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/secunia_research/2009-18/"
    },
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
    },
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
    },
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "url": "http://www.securityfocus.com/archive/1/502759/100/0/threaded"
    },
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "url": "http://www.securityfocus.com/archive/1/502762/100/0/threaded"
    },
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "url": "http://www.securityfocus.com/bid/34791"
    },
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "url": "http://www.vupen.com/english/advisories/2010/1040"
    },
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/34291"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/34481"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/34756"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/34963"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/35064"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/secunia_research/2009-17/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/secunia_research/2009-18/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/502759/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/502762/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/34791"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2010/1040"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076"
    }
  ],
  "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-FVM9-XXRQ-GWMC

Vulnerability from github – Published: 2022-05-02 03:13 – Updated: 2025-04-09 04:08

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2009-0195"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2009-04-23T17:30:00Z",
    "severity": "MODERATE"
  },
  "details": "Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.",
  "id": "GHSA-fvm9-xxrq-gwmc",
  "modified": "2025-04-09T04:08:43Z",
  "published": "2022-05-02T03:13:27Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0195"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/34291"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/34481"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/34756"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/34963"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/35064"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/secunia_research/2009-17"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/secunia_research/2009-18"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/502759/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/502762/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/34791"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2010/1040"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2009-0195

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Aliases

CVE-2009-0195

Aliases

CVE-2009-0195

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2009-0195",
    "description": "Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.",
    "id": "GSD-2009-0195",
    "references": [
      "https://www.suse.com/security/cve/CVE-2009-0195.html",
      "https://access.redhat.com/errata/RHSA-2010:0400",
      "https://access.redhat.com/errata/RHSA-2010:0399",
      "https://access.redhat.com/errata/RHSA-2009:0480",
      "https://access.redhat.com/errata/RHSA-2009:0458",
      "https://access.redhat.com/errata/RHSA-2009:0431",
      "https://access.redhat.com/errata/RHSA-2009:0430",
      "https://access.redhat.com/errata/RHSA-2009:0429",
      "https://linux.oracle.com/cve/CVE-2009-0195.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2009-0195"
      ],
      "details": "Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.",
      "id": "GSD-2009-0195",
      "modified": "2023-12-13T01:19:44.066661Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "PSIRT-CNA@flexerasoftware.com",
        "ID": "CVE-2009-0195",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://secunia.com/secunia_research/2009-18/",
            "refsource": "MISC",
            "url": "http://secunia.com/secunia_research/2009-18/"
          },
          {
            "name": "34963",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/34963"
          },
          {
            "name": "35064",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/35064"
          },
          {
            "name": "34481",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/34481"
          },
          {
            "name": "20090417 Secunia Research: CUPS pdftops JBIG2 Symbol Dictionary Buffer Overflow",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/502759/100/0/threaded"
          },
          {
            "name": "RHSA-2009:0480",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
          },
          {
            "name": "ADV-2010-1040",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2010/1040"
          },
          {
            "name": "RHSA-2009:0458",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10076",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076"
          },
          {
            "name": "MDVSA-2010:087",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
          },
          {
            "name": "34756",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/34756"
          },
          {
            "name": "34291",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/34291"
          },
          {
            "name": "20090417 Secunia Research: Xpdf JBIG2 Symbol Dictionary Buffer Overflow Vulnerability",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/502762/100/0/threaded"
          },
          {
            "name": "http://secunia.com/secunia_research/2009-17/",
            "refsource": "MISC",
            "url": "http://secunia.com/secunia_research/2009-17/"
          },
          {
            "name": "34791",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/34791"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "3.02",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.3.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:foolabs:xpdf:3.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "PSIRT-CNA@flexerasoftware.com",
          "ID": "CVE-2009-0195"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-119"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://secunia.com/secunia_research/2009-18/",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/secunia_research/2009-18/"
            },
            {
              "name": "http://secunia.com/secunia_research/2009-17/",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/secunia_research/2009-17/"
            },
            {
              "name": "34481",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/34481"
            },
            {
              "name": "34291",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/34291"
            },
            {
              "name": "34756",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/34756"
            },
            {
              "name": "RHSA-2009:0458",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
            },
            {
              "name": "34963",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/34963"
            },
            {
              "name": "34791",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/34791"
            },
            {
              "name": "RHSA-2009:0480",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0480.html"
            },
            {
              "name": "35064",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/35064"
            },
            {
              "name": "ADV-2010-1040",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2010/1040"
            },
            {
              "name": "MDVSA-2010:087",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087"
            },
            {
              "name": "oval:org.mitre.oval:def:10076",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076"
            },
            {
              "name": "20090417 Secunia Research: Xpdf JBIG2 Symbol Dictionary Buffer Overflow Vulnerability",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/502762/100/0/threaded"
            },
            {
              "name": "20090417 Secunia Research: CUPS pdftops JBIG2 Symbol Dictionary Buffer Overflow",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/502759/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": true
        }
      },
      "lastModifiedDate": "2019-03-06T16:30Z",
      "publishedDate": "2009-04-23T17:30Z"
    }
  }
}

RHSA-2009:0429

Vulnerability from csaf_redhat - Published: 2009-04-16 22:11 - Updated: 2026-06-25 10:35

Summary

Red Hat Security Advisory: cups security update

Severity

Important

Scope

12 vulnerabilities in this advisory, including CVE-2009-0195.

CVE-2009-0195

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Fixed: 108 products

https://access.redhat.com/errata/RHSA-2009:0429

Open the full advisory

RHSA-2009:0430

Vulnerability from csaf_redhat - Published: 2009-04-16 22:33 - Updated: 2026-06-25 10:35

Summary

Red Hat Security Advisory: xpdf security update

Severity

Important

Scope

11 vulnerabilities in this advisory, including CVE-2009-0195.

CVE-2009-0195

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Fixed: 64 products

https://access.redhat.com/errata/RHSA-2009:0430

Open the full advisory

RHSA-2009:0431

Vulnerability from csaf_redhat - Published: 2009-04-16 22:49 - Updated: 2026-06-25 10:35

Summary

Red Hat Security Advisory: kdegraphics security update

Severity

Important

Scope

11 vulnerabilities in this advisory, including CVE-2009-0195.

CVE-2009-0195

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Fixed: 63 products

https://access.redhat.com/errata/RHSA-2009:0431

Open the full advisory

RHSA-2009:0458

Vulnerability from csaf_redhat - Published: 2009-04-30 20:55 - Updated: 2026-06-25 10:35

Summary

Red Hat Security Advisory: gpdf security update

Severity

Important

Scope

12 vulnerabilities in this advisory, including CVE-2009-0195.

CVE-2009-0195

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Fixed: 32 products

https://access.redhat.com/errata/RHSA-2009:0458

Open the full advisory

RHSA-2009:0480

Vulnerability from csaf_redhat - Published: 2009-05-13 14:32 - Updated: 2026-06-25 10:35

Summary

Red Hat Security Advisory: poppler security update

Severity

Important

Scope

16 vulnerabilities in this advisory, including CVE-2009-0195.

CVE-2009-0195

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Fixed: 39 products

https://access.redhat.com/errata/RHSA-2009:0480

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2009-0195 (GCVE-0-2009-0195)

Description

Solution

Description

Solution

Tags

Sightings

Nomenclature