Description
Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to "g*allocn."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | xpdf | 3.02-1.4+lenny1 | — |
| Debian 13 | xpdf | 3.02-1.4+lenny1 | — |
| Debian 12 | xpdf | 3.02-1.4+lenny1 | — |
| Debian 5.0 | kdegraphics | 4:3.5.9-3+lenny1 | DSA-1793-1 |
| Debian 5.0 | xpdf | 3.02-1.4+lenny1 | DSA-1790-1 |
| Debian 4.0 | kdegraphics | 4:3.5.5-3etch3 | DSA-1793-1 |
| Debian 4.0 | xpdf | 3.01-9.1+etch6 | DSA-1790-1 |
Advisories 2
- DSA-1790-1 xpdf - multiple vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1793-1 kdegraphics - multiple vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- DSA-1793 vendor-advisory
- http://support.apple.com/kb/HT3639
- DSA-1790 vendor-advisory
- 35037 third-party-advisory
- ADV-2009-1621 vdb-entry
- http://support.apple.com/kb/HT3549
- SSA:2009-129-01 vendor-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=263028
- 35074 third-party-advisory
- APPLE-SA-2009-06-17-1 vendor-advisory
- APPLE-SA-2009-05-12 vendor-advisory
- 35065 third-party-advisory
- 34568 vdb-entry
- SUSE-SA:2009:024 vendor-advisory
- 34991 third-party-advisory
- MDVSA-2009:101 vendor-advisory
- SUSE-SR:2009:010 vendor-advisory
- TA09-133A third-party-advisory
- 35685 third-party-advisory
- ADV-2009-1297 vdb-entry
- multiple-jbig2-unspecified(50377) vdb-entry
- 34852 third-party-advisory
- SUSE-SR:2009:012 vendor-advisory
- 34959 third-party-advisory