CVE-2009-0791 xpdf：複数の整数オーバーフロー

CVE-2009-1188 xpdf/poppler：SplashBitmap 整数オーバーフロー

CVE-2009-3608 xpdf/poppler：ObjectStream::ObjectStream における整数オーバーフロー（oCERT-2009-016）

CVE-2009-3609 xpdf/poppler：ImageStream::ImageStream 整数オーバーフロー

CVE-2009-3604 xpdf/poppler：Splash::drawImage 整数オーバーフロー、および割り当て戻り値チェックの欠落

KPDF に、複数の整数オーバーフローの欠陥が見つかりました。攻撃者が、悪意ある PDF ファイルを作成し、これが開かれた場合に、 KPDF をクラッシュさせたり、任意のコードを実行したりする可能性があります。（CVE-2009-0791、

CVE-2009-1188、CVE-2009-3604、CVE-2009-3606、CVE-2009-3608、CVE-2009-3609）

Red Hat セキュリティアドバイザリ 2009:1503 から：

複数のセキュリティ問題を解決する、更新済みの gpdf パッケージが Red Hat Enterprise Linux 4 で現在利用可能です。

Red Hat セキュリティレスポンスチームは、この更新に重大なセキュリティインパクトがあると評価しています。

GPdf は、ポータブル・ドキュメント・フォーマット（PDF）ファイル用のビューアーです。

GPdf に、複数の整数オーバーフローの欠陥が見つかりました。攻撃者が、悪意ある PDF ファイルを作成し、これが開かれた場合に、 GPdf をクラッシュさせたり、任意のコードを実行したりする可能性があります。（CVE-2009-0791、CVE-2009-1188、CVE-2009-3604、 CVE-2009-3608、CVE-2009-3609）

Red Hat は、CVE-2009-3604 の問題を報告してくれた Adam Zabrocki 氏、CVE-2009-3608 の問題を報告してくれた Chris Rohlf 氏がに感謝の意を表します。

ユーザーは、バックポートされたパッチが含まれる、この更新済みパッケージにアップグレードし、これらの問題を修正することが推奨されます。

From Red Hat Security Advisory 2009:0480 :

Updated poppler packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red Hat Security Response Team.

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Multiple integer overflow flaws were found in poppler. An attacker could create a malicious PDF file that would cause applications that use poppler (such as Evince) to crash or, potentially, execute arbitrary code when opened. (CVE-2009-0147, CVE-2009-1179, CVE-2009-1187, CVE-2009-1188)

Multiple buffer overflow flaws were found in poppler's JBIG2 decoder.
An attacker could create a malicious PDF file that would cause applications that use poppler (such as Evince) to crash or, potentially, execute arbitrary code when opened. (CVE-2009-0146, CVE-2009-1182)

Multiple flaws were found in poppler's JBIG2 decoder that could lead to the freeing of arbitrary memory. An attacker could create a malicious PDF file that would cause applications that use poppler (such as Evince) to crash or, potentially, execute arbitrary code when opened. (CVE-2009-0166, CVE-2009-1180)

Multiple input validation flaws were found in poppler's JBIG2 decoder.
An attacker could create a malicious PDF file that would cause applications that use poppler (such as Evince) to crash or, potentially, execute arbitrary code when opened. (CVE-2009-0800)

Multiple denial of service flaws were found in poppler's JBIG2 decoder. An attacker could create a malicious PDF file that would cause applications that use poppler (such as Evince) to crash when opened. (CVE-2009-0799, CVE-2009-1181, CVE-2009-1183)

Red Hat would like to thank Braden Thomas and Drew Yao of the Apple Product Security team, and Will Dormann of the CERT/CC for responsibly reporting these flaws.

Users are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.

An update to address jbig2-related security issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- apply xpdf-3.02pl4 security patch to fix:
    CVE-2009-1188/CVE-2009-3603, CVE-2009-3604,     CVE-2009-3606, CVE-2009-3608, CVE-2009-3609

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An out-of-bounds reading flaw in the JBIG2 decoder allows remote attackers to cause a denial of service (crash) via a crafted PDF file (CVE-2009-0799).

Multiple input validation flaws in the JBIG2 decoder allows remote attackers to execute arbitrary code via a crafted PDF file (CVE-2009-0800).

An integer overflow in the JBIG2 decoder allows remote attackers to execute arbitrary code via a crafted PDF file (CVE-2009-1179).

A free of invalid data flaw in the JBIG2 decoder allows remote attackers to execute arbitrary code via a crafted PDF (CVE-2009-1180).

A NULL pointer dereference flaw in the JBIG2 decoder allows remote attackers to cause denial of service (crash) via a crafted PDF file (CVE-2009-1181).

Multiple buffer overflows in the JBIG2 MMR decoder allows remote attackers to cause denial of service or to execute arbitrary code via a crafted PDF file (CVE-2009-1182, CVE-2009-1183).

An integer overflow in the JBIG2 decoding feature allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CVE-2009-1187).

An integer overflow in the JBIG2 decoding feature allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document (CVE-2009-1188).

Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third-party information. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1188 (CVE-2009-3603).

The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow (CVE-2009-3604).

Multiple integer overflows allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, related to (1) glib/poppler-page.cc; (2) ArthurOutputDev.cc, (3) CairoOutputDev.cc, (4) GfxState.cc, (5) JBIG2Stream.cc, (6) PSOutputDev.cc, and (7) SplashOutputDev.cc in poppler/; and (8) SplashBitmap.cc, (9) Splash.cc, and (10) SplashFTFont.cc in splash/. NOTE: this may overlap CVE-2009-0791 (CVE-2009-3605).

Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow (CVE-2009-3606).

Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE:
some of these details are obtained from third-party information (CVE-2009-3607).

Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow (CVE-2009-3608).

Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read (CVE-2009-3609).

Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc as used by the Abiword pdftoabw utility, allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PDF file (CVE-2009-3938). This update provides fixes for that vulnerabilities.

Add patch from upstream to fix several security issues in xpdf code:
CVE-2009-1188/CVE-2009-3603, CVE-2009-3604, CVE-2009-3606, CVE-2009-3608, CVE-2009-3609

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

CVE-2009-0791 xpdf: multiple integer overflows

CVE-2009-1188 xpdf/poppler: SplashBitmap integer overflow

CVE-2009-3608 xpdf/poppler: integer overflow in ObjectStream::ObjectStream (oCERT-2009-016)

CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow

CVE-2009-3604 xpdf/poppler: Splash::drawImage integer overflow and missing allocation return value check

Multiple integer overflow flaws were found in KPDF. An attacker could create a malicious PDF file that would cause KPDF to crash or, potentially, execute arbitrary code when opened. (CVE-2009-0791,

CVE-2009-1188, CVE-2009-3604, CVE-2009-3606, CVE-2009-3608, CVE-2009-3609)

From Red Hat Security Advisory 2009:1503 :

An updated gpdf package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

GPdf is a viewer for Portable Document Format (PDF) files.

Multiple integer overflow flaws were found in GPdf. An attacker could create a malicious PDF file that would cause GPdf to crash or, potentially, execute arbitrary code when opened. (CVE-2009-0791, CVE-2009-1188, CVE-2009-3604, CVE-2009-3608, CVE-2009-3609)

Red Hat would like to thank Adam Zabrocki for reporting the CVE-2009-3604 issue, and Chris Rohlf for reporting the CVE-2009-3608 issue.

Users are advised to upgrade to this updated package, which contains a backported patch to correct these issues.

Updated kdegraphics packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red Hat Security Response Team.

The kdegraphics packages contain applications for the K Desktop Environment, including KPDF, a viewer for Portable Document Format (PDF) files.

Multiple integer overflow flaws were found in KPDF. An attacker could create a malicious PDF file that would cause KPDF to crash or, potentially, execute arbitrary code when opened. (CVE-2009-0791, CVE-2009-1188, CVE-2009-3604, CVE-2009-3606, CVE-2009-3608, CVE-2009-3609)

Red Hat would like to thank Adam Zabrocki for reporting the CVE-2009-3604 issue, and Chris Rohlf for reporting the CVE-2009-3608 issue.

Users are advised to upgrade to these updated packages, which contain a backported patch to resolve these issues.

An updated gpdf package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

GPdf is a viewer for Portable Document Format (PDF) files.

Multiple integer overflow flaws were found in GPdf. An attacker could create a malicious PDF file that would cause GPdf to crash or, potentially, execute arbitrary code when opened. (CVE-2009-0791, CVE-2009-1188, CVE-2009-3604, CVE-2009-3608, CVE-2009-3609)

Red Hat would like to thank Adam Zabrocki for reporting the CVE-2009-3604 issue, and Chris Rohlf for reporting the CVE-2009-3608 issue.

Users are advised to upgrade to this updated package, which contains a backported patch to correct these issues.

Updated kdegraphics packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

The kdegraphics packages contain applications for the K Desktop Environment, including KPDF, a viewer for Portable Document Format (PDF) files.

Multiple integer overflow flaws were found in KPDF. An attacker could create a malicious PDF file that would cause KPDF to crash or, potentially, execute arbitrary code when opened. (CVE-2009-0791, CVE-2009-1188, CVE-2009-3604, CVE-2009-3608, CVE-2009-3609)

Red Hat would like to thank Adam Zabrocki for reporting the CVE-2009-3604 issue, and Chris Rohlf for reporting the CVE-2009-3608 issue.

Users are advised to upgrade to these updated packages, which contain a backported patch to resolve these issues.

Several vulnerabilities have been identified in xpdf, a suite of tools for viewing and converting Portable Document Format (PDF) files.

The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2009-1188 and CVE-2009-3603     Integer overflow in SplashBitmap::SplashBitmap which     might allow remote attackers to execute arbitrary code     or an application crash via a crafted PDF document.

  - CVE-2009-3604     NULL pointer dereference or heap-based buffer overflow     in Splash::drawImage which might allow remote attackers     to cause a denial of service (application crash) or     possibly execute arbitrary code via a crafted PDF     document.

  - CVE-2009-3606     Integer overflow in the PSOutputDev::doImageL1Sep which     might allow remote attackers to execute arbitrary code     via a crafted PDF document.

  - CVE-2009-3608     Integer overflow in the ObjectStream::ObjectStream which     might allow remote attackers to execute arbitrary code     via a crafted PDF document.

  - CVE-2009-3609     Integer overflow in the ImageStream::ImageStream which     might allow remote attackers to cause a denial of     service via a crafted PDF document.

CVE-2009-0791 xpdf: multiple integer overflows

CVE-2009-1188 xpdf/poppler: SplashBitmap integer overflow

CVE-2009-3608 xpdf/poppler: integer overflow in ObjectStream::ObjectStream (oCERT-2009-016)

CVE-2009-3606 xpdf/poppler: PSOutputDev::doImageL1Sep integer overflow

CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow

CVE-2009-3604 xpdf/poppler: Splash::drawImage integer overflow and missing allocation return value check

Multiple integer overflow flaws were found in Xpdf. An attacker could create a malicious PDF file that would cause Xpdf to crash or, potentially, execute arbitrary code when opened. (CVE-2009-0791,

CVE-2009-1188, CVE-2009-3604, CVE-2009-3606, CVE-2009-3608, CVE-2009-3609)

From Red Hat Security Advisory 2009:1501 :

An updated xpdf package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

Xpdf is an X Window System based viewer for Portable Document Format (PDF) files.

Multiple integer overflow flaws were found in Xpdf. An attacker could create a malicious PDF file that would cause Xpdf to crash or, potentially, execute arbitrary code when opened. (CVE-2009-0791, CVE-2009-1188, CVE-2009-3604, CVE-2009-3606, CVE-2009-3608, CVE-2009-3609)

Red Hat would like to thank Adam Zabrocki for reporting the CVE-2009-3604 issue, and Chris Rohlf for reporting the CVE-2009-3608 issue.

Users are advised to upgrade to this updated package, which contains a backported patch to correct these issues.

Will Dormann, Alin Rad Pop, Braden Thomas, and Drew Yao discovered that poppler contained multiple security issues in its JBIG2 decoder.
If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update to the latest stable upstream release fixing many bugs, as well as addressing several security issues. Release announcement, http://lists.freedesktop.org/archives/poppler/2009-May/004721.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
60679	Scientific Linux セキュリティ更新：SL4.x、SL5.x i386/x86_64 の kdegraphics	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
67941	Oracle Linux 4：gpdf（ELSA-2009-1503）	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
67858	Oracle Linux 5 : poppler (ELSA-2009-0480)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
39548	Fedora 9 : poppler-0.8.7-2.fc9 (2009-6982)	Nessus	Fedora Local Security Checks	2009/6/28	2021/1/11	high
42192	Fedora 11 : xpdf-3.02-15.fc11 (2009-10648)	Nessus	Fedora Local Security Checks	2009/10/22	2021/1/11	high
44995	Mandriva Linux Security Advisory : poppler (MDVSA-2010:055)	Nessus	Mandriva Local Security Checks	2010/3/8	2021/1/6	high
47272	Fedora 13 : pdfedit-0.4.3-4.fc13 (2010-1805)	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	high
60679	Scientific Linux Security Update : kdegraphics on SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
67941	Oracle Linux 4 : gpdf (ELSA-2009-1503)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
42161	RHEL 5 : kdegraphics (RHSA-2009:1502)	Nessus	Red Hat Local Security Checks	2009/10/16	2021/1/14	high
42194	Fedora 10 : xpdf-3.02-15.fc10 (2009-10694)	Nessus	Fedora Local Security Checks	2009/10/22	2021/1/11	high
43802	CentOS 5 : kdegraphics (CESA-2009:1502)	Nessus	CentOS Local Security Checks	2010/1/6	2021/1/4	high
43803	CentOS 4 : gpdf (CESA-2009:1503)	Nessus	CentOS Local Security Checks	2010/1/6	2021/1/4	high
43805	CentOS 4 : kdegraphics (CESA-2009:1512)	Nessus	CentOS Local Security Checks	2010/1/6	2021/1/4	high
45427	Debian DSA-2028-1 : xpdf - multiple vulnerabilities	Nessus	Debian Local Security Checks	2010/4/6	2021/1/4	high
60681	Scientific Linux Security Update : xpdf on SL3.x, SL4.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
67940	Oracle Linux 4 : xpdf (ELSA-2009-1501)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
36635	Ubuntu 6.06 LTS / 8.04 LTS / 8.10 : poppler vulnerabilities (USN-759-1)	Nessus	Ubuntu Local Security Checks	2009/4/23	2021/1/19	high
39844	Fedora 11 : poppler-0.10.7-2.fc11 (2009-6972)	Nessus	Fedora Local Security Checks	2009/7/17	2021/1/11	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high