CVE-2009-3603 in Poppler
Summary
Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1188.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
10/09/2009
Disclosure
10/21/2009
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 50516 | Poppler SplashBitmap numeric error | 189 | Proof-of-Concept | Official fix | CVE-2009-3603 |