{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2009-06-03T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-09-28T12:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"name": "1022326", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1022326"}, {"name": "oval:org.mitre.oval:def:10534", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10534"}, {"name": "35195", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/35195"}, {"name": "37028", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/37028"}, {"name": "35340", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/35340"}, {"name": "RHSA-2009:1501", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://rhn.redhat.com/errata/RHSA-2009-1501.html"}, {"name": "37079", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/37079"}, {"name": "ADV-2009-1488", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2009/1488"}, {"name": "RHSA-2009:1512", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://rhn.redhat.com/errata/RHSA-2009-1512.html"}, {"name": "37077", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/37077"}, {"name": "RHSA-2009:1503", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://rhn.redhat.com/errata/RHSA-2009-1503.html"}, {"name": "cups-pdftops-filter-bo(50941)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50941"}, {"name": "37037", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/37037"}, {"name": "RHSA-2009:1502", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://rhn.redhat.com/errata/RHSA-2009-1502.html"}, {"name": "RHSA-2009:1500", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://rhn.redhat.com/errata/RHSA-2009-1500.html"}, {"name": "ADV-2009-2928", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2009/2928"}, {"name": "37023", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/37023"}, {"name": "35685", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/35685"}, {"name": "SUSE-SR:2009:012", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"}, {"name": "37043", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/37043"}, {"name": "RHSA-2009:1083", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2009-1083.html"}, {"name": "MDVSA-2009:334", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:334"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=491840"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T04:48:52.062Z"}, "title": "CVE Program Container", "references": [{"name": "1022326", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1022326"}, {"name": "oval:org.mitre.oval:def:10534", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10534"}, {"name": "35195", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/35195"}, {"name": "37028", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/37028"}, {"name": "35340", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/35340"}, {"name": "RHSA-2009:1501", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://rhn.redhat.com/errata/RHSA-2009-1501.html"}, {"name": "37079", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/37079"}, {"name": "ADV-2009-1488", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2009/1488"}, {"name": "RHSA-2009:1512", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://rhn.redhat.com/errata/RHSA-2009-1512.html"}, {"name": "37077", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/37077"}, {"name": "RHSA-2009:1503", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://rhn.redhat.com/errata/RHSA-2009-1503.html"}, {"name": "cups-pdftops-filter-bo(50941)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50941"}, {"name": "37037", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/37037"}, {"name": "RHSA-2009:1502", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://rhn.redhat.com/errata/RHSA-2009-1502.html"}, {"name": "RHSA-2009:1500", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://rhn.redhat.com/errata/RHSA-2009-1500.html"}, {"name": "ADV-2009-2928", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2009/2928"}, {"name": "37023", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/37023"}, {"name": "35685", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/35685"}, {"name": "SUSE-SR:2009:012", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"}, {"name": "37043", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/37043"}, {"name": "RHSA-2009:1083", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2009-1083.html"}, {"name": "MDVSA-2009:334", "tags": ["vendor-advisory", "x_refsource_MANDRIVA", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:334"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=491840"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2009-0791", "datePublished": "2009-06-09T17:00:00", "dateReserved": "2009-03-04T00:00:00", "dateUpdated": "2024-08-07T04:48:52.062Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*", "matchCriteriaId": "8335D4E3-563D-4288-B708-A9635BCA595F", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*", "matchCriteriaId": "96592A93-4967-4B91-BCF7-558DC472E7BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*", "matchCriteriaId": "69BD64BB-BDA7-4F82-8324-B7C7C941133C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de entero en el filtro pdftops en CUPS v1.1.17, v1.1.22 y v1.3.7 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda de la aplicaci\u00f3n) o posiblemente ejecutar c\u00f3digo de su elecci\u00f3n mediante un fichero PDF manipulado que dispara una desbordamiento de b\u00fafer basado en memoria din\u00e1mica (heap), posiblemente relacionado con (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx y (5) PSOutputDev.cxx en pdftops/. NOTA: el vector JBIG2Stream.cxx podr\u00eda solapar CVE-2009-1179."}], "id": "CVE-2009-0791", "lastModified": "2023-02-13T02:19:45.823", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2009-06-09T17:30:00.267", "references": [{"source": "secalert@redhat.com", "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/35340"}, {"source": "secalert@redhat.com", "url": "http://secunia.com/advisories/35685"}, {"source": "secalert@redhat.com", "url": "http://secunia.com/advisories/37023"}, {"source": "secalert@redhat.com", "url": "http://secunia.com/advisories/37028"}, {"source": "secalert@redhat.com", "url": "http://secunia.com/advisories/37037"}, {"source": "secalert@redhat.com", "url": "http://secunia.com/advisories/37043"}, {"source": "secalert@redhat.com", "url": "http://secunia.com/advisories/37077"}, {"source": "secalert@redhat.com", "url": "http://secunia.com/advisories/37079"}, {"source": "secalert@redhat.com", "url": "http://securitytracker.com/id?1022326"}, {"source": "secalert@redhat.com", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:334"}, {"source": "secalert@redhat.com", "url": "http://www.redhat.com/support/errata/RHSA-2009-1083.html"}, {"source": "secalert@redhat.com", "url": "http://www.securityfocus.com/bid/35195"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2009/1488"}, {"source": "secalert@redhat.com", "url": "http://www.vupen.com/english/advisories/2009/2928"}, {"source": "secalert@redhat.com", "tags": ["Patch"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=491840"}, {"source": "secalert@redhat.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50941"}, {"source": "secalert@redhat.com", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10534"}, {"source": "secalert@redhat.com", "url": "https://rhn.redhat.com/errata/RHSA-2009-1500.html"}, {"source": "secalert@redhat.com", "url": "https://rhn.redhat.com/errata/RHSA-2009-1501.html"}, {"source": "secalert@redhat.com", "url": "https://rhn.redhat.com/errata/RHSA-2009-1502.html"}, {"source": "secalert@redhat.com", "url": "https://rhn.redhat.com/errata/RHSA-2009-1503.html"}, {"source": "secalert@redhat.com", "url": "https://rhn.redhat.com/errata/RHSA-2009-1512.html"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-189"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2009:1083", "cpe": "cpe:/o:redhat:enterprise_linux:3", "package": "cups-1:1.1.17-13.3.62", "product_name": "Red Hat Enterprise Linux 3", "release_date": "2009-06-03T00:00:00Z"}, {"advisory": "RHSA-2009:1500", "cpe": "cpe:/o:redhat:enterprise_linux:3", "package": "xpdf-1:2.02-17.el3", "product_name": "Red Hat Enterprise Linux 3", "release_date": "2009-10-15T00:00:00Z"}, {"advisory": "RHSA-2010:0401", "cpe": "cpe:/o:redhat:enterprise_linux:3", "package": "tetex-0:1.0.7-67.19", "product_name": "Red Hat Enterprise Linux 3", "release_date": "2010-05-06T00:00:00Z"}, {"advisory": "RHSA-2009:1083", "cpe": "cpe:/o:redhat:enterprise_linux:4", "package": "cups-1:1.1.22-0.rc1.9.32.el4_8.3", "product_name": "Red Hat Enterprise Linux 4", "release_date": "2009-06-03T00:00:00Z"}, {"advisory": "RHSA-2009:1501", "cpe": "cpe:/o:redhat:enterprise_linux:4", "package": "xpdf-1:3.00-22.el4_8.1", "product_name": "Red Hat Enterprise Linux 4", "release_date": "2009-10-15T00:00:00Z"}, {"advisory": "RHSA-2009:1503", "cpe": "cpe:/o:redhat:enterprise_linux:4", "package": "gpdf-0:2.8.2-7.7.2.el4_8.5", "product_name": "Red Hat Enterprise Linux 4", "release_date": "2009-10-15T00:00:00Z"}, {"advisory": "RHSA-2009:1512", "cpe": "cpe:/o:redhat:enterprise_linux:4", "package": "kdegraphics-7:3.3.1-15.el4_8.2", "product_name": "Red Hat Enterprise Linux 4", "release_date": "2009-10-15T00:00:00Z"}, {"advisory": "RHSA-2010:0399", "cpe": "cpe:/o:redhat:enterprise_linux:4", "package": "tetex-0:2.0.2-22.0.1.EL4.16", "product_name": "Red Hat Enterprise Linux 4", "release_date": "2010-05-06T00:00:00Z"}, {"advisory": "RHSA-2009:0480", "cpe": "cpe:/o:redhat:enterprise_linux:5", "package": "poppler-0:0.5.4-4.4.el5_3.9", "product_name": "Red Hat Enterprise Linux 5", "release_date": "2009-05-13T00:00:00Z"}, {"advisory": "RHSA-2009:1502", "cpe": "cpe:/o:redhat:enterprise_linux:5", "package": "kdegraphics-7:3.5.4-15.el5_4.2", "product_name": "Red Hat Enterprise Linux 5", "release_date": "2009-10-15T00:00:00Z"}, {"advisory": "RHSA-2010:0400", "cpe": "cpe:/o:redhat:enterprise_linux:5", "package": "tetex-0:3.0-33.8.el5_5.5", "product_name": "Red Hat Enterprise Linux 5", "release_date": "2010-05-06T00:00:00Z"}], "bugzilla": {"description": "xpdf: multiple integer overflows", "id": "491840", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=491840"}, "csaw": false, "cvss": {"cvss_base_score": "5.8", "cvss_scoring_vector": "AV:A/AC:L/Au:N/C:P/I:P/A:P", "status": "verified"}, "cwe": "CWE-190", "details": ["Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179."], "name": "CVE-2009-0791", "public_date": "2009-05-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2009-0791\nhttps://nvd.nist.gov/vuln/detail/CVE-2009-0791"], "threat_severity": "Moderate"}