CVE-2009-0195

N/A

Published: April 23, 2009 at 05:00 PM UTC

Updated: June 16, 2026 at 11:04 PM UTC

3 products affected across 3 vendorsCUPSXpdfreaderXpdf

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 5%

Description

Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

CUPS · Apple

95%

1.3.9

Xpdf · Foolabs

95%

0.5a 0.7a 0.91a 0.91b 0.91c 0.92a 0.92b 0.92c 0.92d 0.92e 0.93a 0.93b 0.93c 1.00a 3.0.1

Xpdfreader · Glyphandcog

95%

v ≤ 3.020.2 0.3 0.4 0.5 0.6 0.7 0.80 0.90 0.91 0.92 0.93 1.00 1.01 2.00 2.01 2.02 2.03 3.00

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references