Skip to content
OpenAdvisories
Unscored RHSA-2009:0480 16 CVEs

Red Hat Security Advisory: poppler security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client poppler 0:0.5.4-4.4.el5_3.9
Red Hat · RHEL 5 enterprise_linux:5::client poppler-debuginfo 0:0.5.4-4.4.el5_3.9
Red Hat · RHEL 5 enterprise_linux:5::client poppler-utils 0:0.5.4-4.4.el5_3.9
Red Hat · RHEL 5 enterprise_linux:5::client_workstation poppler 0:0.5.4-4.4.el5_3.9
Red Hat · RHEL 5 enterprise_linux:5::client_workstation poppler-debuginfo 0:0.5.4-4.4.el5_3.9
Red Hat · RHEL 5 enterprise_linux:5::client_workstation poppler-devel 0:0.5.4-4.4.el5_3.9
Red Hat · RHEL 5 enterprise_linux:5::server poppler 0:0.5.4-4.4.el5_3.9
Red Hat · RHEL 5 enterprise_linux:5::server poppler-debuginfo 0:0.5.4-4.4.el5_3.9
Red Hat · RHEL 5 enterprise_linux:5::server poppler-devel 0:0.5.4-4.4.el5_3.9
Red Hat · RHEL 5 enterprise_linux:5::server poppler-utils 0:0.5.4-4.4.el5_3.9

Vulnerabilities 16

  • Unscored —
    CVE-2009-0146

    Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products …

    poppler xpdf Debian
  • Unscored —
    CVE-2009-0147

    Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-0166

    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to ca…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-0195

    Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attacker…

    xpdf Debian
  • Unscored —
    CVE-2009-0791

    Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, a…

    cups Debian
  • Unscored —
    CVE-2009-0799

    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-0800

    Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler bef…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-1179

    Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and o…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-1180

    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-1181

    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-1182

    Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before …

    poppler xpdf Debian
  • Unscored —
    CVE-2009-1183

    The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products al…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-1187

    Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of se…

    poppler Debian
  • Unscored —
    CVE-2009-1188

    Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-3604

    The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kd…

    poppler ipe xpdf Debian Ubuntu
  • Unscored —
    CVE-2009-3606

    Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraph…

    poppler ipe xpdf Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495894
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490612
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490614
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490625
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=491864
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495886
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495887
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495889
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495892
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495896
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495899
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495906
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495907
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0480.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-0146
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0146
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0146
  • report
    https://access.redhat.com/security/cve/CVE-2009-0147
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0147
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0147
  • report
    https://access.redhat.com/security/cve/CVE-2009-0166
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0166
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0166
  • report
    https://access.redhat.com/security/cve/CVE-2009-0195
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0195
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0195
  • report
    https://access.redhat.com/security/cve/CVE-2009-0791
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=491840
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0791
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0791
  • report
    https://access.redhat.com/security/cve/CVE-2009-0799
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0799
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0799
  • report
    https://access.redhat.com/security/cve/CVE-2009-0800
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0800
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0800
  • report
    https://access.redhat.com/security/cve/CVE-2009-1179
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1179