Skip to content
OpenAdvisories
Unscored RHSA-2009:0430 11 CVEs

Red Hat Security Advisory: xpdf security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as xpdf 1:2.02-14.el3
Red Hat · RHEL 3 enterprise_linux:3::as xpdf-debuginfo 1:2.02-14.el3
Red Hat · RHEL 3 enterprise_linux:3::desktop xpdf 1:2.02-14.el3
Red Hat · RHEL 3 enterprise_linux:3::desktop xpdf-debuginfo 1:2.02-14.el3
Red Hat · RHEL 3 enterprise_linux:3::es xpdf 1:2.02-14.el3
Red Hat · RHEL 3 enterprise_linux:3::es xpdf-debuginfo 1:2.02-14.el3
Red Hat · RHEL 3 enterprise_linux:3::ws xpdf 1:2.02-14.el3
Red Hat · RHEL 3 enterprise_linux:3::ws xpdf-debuginfo 1:2.02-14.el3
Red Hat · RHEL 4 enterprise_linux:4::as xpdf 1:3.00-20.el4
Red Hat · RHEL 4 enterprise_linux:4::as xpdf-debuginfo 1:3.00-20.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop xpdf 1:3.00-20.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop xpdf-debuginfo 1:3.00-20.el4
Red Hat · RHEL 4 enterprise_linux:4::es xpdf 1:3.00-20.el4
Red Hat · RHEL 4 enterprise_linux:4::es xpdf-debuginfo 1:3.00-20.el4
Red Hat · RHEL 4 enterprise_linux:4::ws xpdf 1:3.00-20.el4
Red Hat · RHEL 4 enterprise_linux:4::ws xpdf-debuginfo 1:3.00-20.el4

Vulnerabilities 11

  • Unscored —
    CVE-2009-0146

    Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products …

    poppler xpdf Debian
  • Unscored —
    CVE-2009-0147

    Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-0166

    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to ca…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-0195

    Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attacker…

    xpdf Debian
  • Unscored —
    CVE-2009-0799

    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-0800

    Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler bef…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-1179

    Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and o…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-1180

    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-1181

    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-1182

    Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before …

    poppler xpdf Debian
  • Unscored —
    CVE-2009-1183

    The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products al…

    poppler xpdf Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490612
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490614
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490625
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=491864
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495886
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495887
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495889
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495892
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495894
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495896
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495899
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0430.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-0146
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0146
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0146
  • report
    https://access.redhat.com/security/cve/CVE-2009-0147
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0147
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0147
  • report
    https://access.redhat.com/security/cve/CVE-2009-0166
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0166
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0166
  • report
    https://access.redhat.com/security/cve/CVE-2009-0195
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0195
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0195
  • report
    https://access.redhat.com/security/cve/CVE-2009-0799
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0799
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0799
  • report
    https://access.redhat.com/security/cve/CVE-2009-0800
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0800
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0800
  • report
    https://access.redhat.com/security/cve/CVE-2009-1179
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1179
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1179
  • report
    https://access.redhat.com/security/cve/CVE-2009-1180
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1180
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1180
  • report
    https://access.redhat.com/security/cve/CVE-2009-1181
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1181