CVE-2009-3603 in Poppler

Resumen (Inglés)

Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1188.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2009-10-09

Divulgación

2009-10-21

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
50516	Poppler SplashBitmap Ejecución remota de código	189	Prueba de concepto	Arreglo oficial	CVE-2009-3603

Fuentes

• MITRE
• NVD
• CVE Details