Back to Database
Status published
Medium
CVE-2009-1187
Integer overflow in the JBIG2 decoding feature in Poppler before...
Vulnerability Description
Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-1187
Credits & Attribution
No credits recorded in the NVD database.
References
- http://bugs.gentoo.org/show_bug.cgi?id=263028#c16
- https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875
- http://secunia.com/advisories/35064
- https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50184
- http://secunia.com/advisories/35618
- http://www.redhat.com/support/errata/RHSA-2009-0480.html
- http://poppler.freedesktop.org/releases.html
- http://www.securityfocus.com/bid/34568
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:175
- http://www.kb.cert.org/vuls/id/196617
- http://www.vupen.com/english/advisories/2010/1040
- https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html
- http://wiki.rpath.com/Advisories:rPSA-2009-0059
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:087
- http://www.vupen.com/english/advisories/2009/1076
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10292
- http://www.securityfocus.com/archive/1/502761/100/0/threaded
- https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html
- http://secunia.com/advisories/34746
More from poppler
View All →CVE-2025-52886
Poppler Use After Free Vulnerability
Medium
5.5
CVE-2025-52885
GHSL-2025-042: Poppler has Use-After-Free
Medium
6.1
CVE-2012-2142
The error function in Error.cc in poppler before 0.21.4 allows...
High
7.8
CVE-2010-4654
poppler before 0.16.3 has malformed commands that may cause corruption...
High
7.8
CVE-2010-4653
An integer overflow condition in poppler before 0.16.3 can occur...
Medium
6.5
Affected Vendor
poppler
View all reports →Affected Software
poppler
Vulnerable Versions:
0, 0.1, 0.1.1, 0.1.2, 0.2.0, 0.3.0, 0.3.1, 0.3.2, 0.3.3, 0.4.0, 0.4.1, 0.4.2, 0.4.3, 0.4.4, 0.5.0, 0.5.1, 0.5.2, 0.5.3, 0.5.4, 0.5.9, 0.5.90, 0.5.91, 0.6.0, 0.6.1, 0.6.2, 0.6.3, 0.6.4, 0.7.0, 0.7.1, 0.7.2, 0.7.3, 0.8.0, 0.8.1, 0.8.2, 0.8.3, 0.8.4, 0.8.5, 0.8.6, 0.8.7, 0.9.0, 0.9.1, 0.9.2, 0.9.3, 0.10.0, 0.10.1, 0.10.2, 0.10.3, 0.10.4
Timeline
Official Publish:
April 23rd, 2009
Last Modified:
August 7th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.