Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ifferent vulnerability than CVE-2009-3587. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53698 - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878 - http://secunia.com/advisories/36976 - http://www.securitytracker.com/id?1022999 - http://www.vupen.com/english/advisories/2009/2852 - http://www.securityfocus.com/archive/1/507068/100/0/threaded - http://www.securityfocus.com/bid/36653
CVE ID: CVE-2009-3589 State: PUBLISHED Published: 2009-10-08T15:00:00Z Last Updated: 2024-09-16T17:27:41.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table. Additional Analyst Notes: - CVE Program Container: References: - http://koji.fedoraproject.org/koji/buildinfo?buildID=134880 - https://admin.fedoraproject.org/updates/incron-0.5.5-2.el5
CVE ID: CVE-2009-3590 State: PUBLISHED Published: 2009-10-08T16:00:00 Last Updated: 2024-08-07T06:31:10.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showcat.php in VS PANEL 7.3.6 allows remote attackers to execute arbitrary SQL commands via the Cat_ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34848 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49990 - http://www.securityfocus.com/bid/34648 - http://www.exploit-db.com/exploits/8506
CVE ID: CVE-2009-3591 State: PUBLISHED Published: 2009-10-08T17:00:00 Last Updated: 2024-08-07T06:31:10.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507012/100/0/threaded - http://secunia.com/advisories/36961 - http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/src/serverside.c?r1=1023&r2=1033&pathrev=1033 - http://www.securityfocus.com/bid/36606 - http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/Ch
ev=1033 - http://www.securityfocus.com/bid/36606 - http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/ChangeLog?view=markup&pathrev=1033
CVE ID: CVE-2009-3592 State: PUBLISHED Published: 2009-10-08T17:00:00 Last Updated: 2024-08-07T06:31:10.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in customer/home.php in Qualiteam X-Cart allows remote attackers to inject arbitrary web script or HTML via the email parameter in a subscribed action, a different vector than CVE-2005-1823. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0910-exploits/X-Cart-submail-XSS.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/53664 - http://www.securityfocus.com/bid/36601
CVE ID: CVE-2009-3593 State: PUBLISHED Published: 2009-10-08T17:00:00 Last Updated: 2024-08-07T06:31:10.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Freelancers 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to placebid.php and (2) jobid parameter to post_resume.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51828 - http://www.osvdb.org/55993 - http://www.osvdb.org/55992 - http://packetstormsecurity.org/0907-exploits/freelancers-xss.txt - http://secunia.com/advisories/35903
CVE ID: CVE-2009-3594 State: PUBLISHED Published: 2009-10-08T17:00:00 Last Updated: 2024-08-07T06:31:10.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in bpost.php in BLOB Blog System before 1.2 allows remote attackers to inject arbitrary web script or HTML via the postid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35938 - http://www.osvdb.org/56261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51959 - http://blob.yewipeya.net/bpost.php?postid=0008
CVE ID: CVE-2009-3595 State: PUBLISHED Published: 2009-10-08T17:00:00 Last Updated: 2024-08-07T06:31:10.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute arbitrary SQL commands via the Cat_ID parameter, a different vector than CVE-2009-3590. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51783 - http://www.exploit-db.com/exploits/9171 - http://www.vupen.com/english/advisories/2009/2026 - http://www.osvdb.org/56570 - http://secunia.com/advisories/35953
CVE ID: CVE-2009-3596 State: PUBLISHED Published: 2009-10-08T17:00:00 Last Updated: 2024-08-07T06:31:10.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: JoxTechnology Ajox Poll does not properly restrict access to admin/managepoll.php, which allows remote attackers to bypass authentication and gain administrative access via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51809
CVE ID: CVE-2009-3597 State: PUBLISHED Published: 2009-10-08T17:00:00 Last Updated: 2024-08-07T06:31:10.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Digitaldesign CMS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for autoconfig.dd. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51676
CVE ID: CVE-2009-3598 State: PUBLISHED Published: 2009-10-08T17:00:00 Last Updated: 2024-08-07T06:31:10.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in survey_result.php in eCardMAX FormXP 2007 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51723 - http://packetstormsecurity.org/0907-exploits/formxp-xss.txt - http://secunia.com/advisories/35836 - http://osvdb.org/55859
CVE ID: CVE-2009-3599 State: PUBLISHED Published: 2009-10-08T17:00:00 Last Updated: 2024-08-07T06:31:10.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in single_winner1.php in HUBScript 1.0 allows remote attackers to inject arbitrary web script or HTML via the bid_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51829 - http://secunia.com/advisories/35895 - http://packetstormsecurity.org/0907-exploits/hubscript-xssphpinfo.txt - http://osvdb.org/55961
CVE ID: CVE-2009-3600 State: PUBLISHED Published: 2009-10-08T17:00:00 Last Updated: 2024-08-07T06:31:10.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: HUBScript 1.0 allows remote attackers to obtain configuration information via a direct request to manage/phpinfo.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55962 - http://secunia.com/advisories/35895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51830 - http://packetstormsecurity.org/0907-exploits/hubscript-xssphpinfo.txt
CVE ID: CVE-2009-3601 State: PUBLISHED Published: 2009-10-08T17:00:00 Last Updated: 2024-08-07T06:31:10.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in demo_page.php in Scriptsez Ultimate Poll allows remote attackers to inject arbitrary web script or HTML via the clr parameter in a vote action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55914 - http://packetstormsecurity.org/0907-exploits/ultimatepoll-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/51773 - http://secunia.com/advisories/35834
CVE ID: CVE-2009-3602 State: PUBLISHED Published: 2009-10-13T10:00:00 Last Updated: 2024-08-07T06:31:10.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37913 - http://www.openwall.com/lists/oss-security/2009/10/09/3 - http://secunia.com/advisories/36996 - http://unbound.net/pipermail/unbound-users/2009-October/000852.html - http://www.vupen
://secunia.com/advisories/36996 - http://unbound.net/pipermail/unbound-users/2009-October/000852.html - http://www.vupen.com/english/advisories/2009/2875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53729 - http://www.openwall.com/lists/oss-security/2009/10/09/2 - http://osvdb.org/58836 - http://www.debian.org/security/2009/dsa-1963
CVE ID: CVE-2009-3603 State: PUBLISHED Published: 2009-10-21T17:00:00 Last Updated: 2024-08-07T06:31:10.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1188. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39938 - https://rhn.redhat.com/errata/RHSA-2
Notes: - CVE Program Container: References: - http://secunia.com/advisories/39938 - https://rhn.redhat.com/errata/RHSA-2009-1504.html - ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch - http://www.mandriva.com/security/advisories?name=MDVSA-2009:287 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html - http://poppler.freedesktop.org/ - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html - http://www.debian.org/security/2010/dsa-2028 - http://www.debian.org/security/2010/dsa-2050 - http://secunia.com/advisories/37159 - http://secunia.com/advisories/37
- http://www.debian.org/security/2010/dsa-2050 - http://secunia.com/advisories/37159 - http://secunia.com/advisories/37054 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html - http://secunia.com/advisories/37114 - http://securitytracker.com/id?1023029 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:175 - http://www.vupen.com/english/advisories/2010/1040 - http://www.ubuntu.com/usn/USN-850-3 - http://www.vupen.com/english/advisories/2010/0802 - http://lists.fedoraproject.org/pipermail/packa
u.com/usn/USN-850-3 - http://www.vupen.com/english/advisories/2010/0802 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/53793 - http://secunia.com/advisories/37034 - http://www.vupen.com/english/advisories/2009/2924 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:087 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1 - http://www.vupen.com/english/advisories/2010/1220 - http://www.ubuntu.com/usn/USN-850-1 - http://secunia.com/advisories/37053 - http://secunia.com/advisories/39327 - https://bugzilla.redhat.com/show_bug.cgi?id=526915 - https://oval.cisecurity.org/reposito
secunia.com/advisories/39327 - https://bugzilla.redhat.com/show_bug.cgi?id=526915 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9671 - http://www.securityfocus.com/bid/36703 - http://www.vupen.com/english/advisories/2009/2925
CVE ID: CVE-2009-3604 State: PUBLISHED Published: 2009-10-21T17:00:00 Last Updated: 2024-08-07T06:31:10.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39938 - http://secunia.com/advisories/37042 - ftp://
CVE Program Container: References: - http://secunia.com/advisories/39938 - http://secunia.com/advisories/37042 - ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch - http://www.mandriva.com/security/advisories?name=MDVSA-2009:287 - http://secunia.com/advisories/37028 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html - http://site.pi3.com.pl/adv/xpdf.txt - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html - https://rhn.redhat.com/errata/RHSA-2009-1501.html - http://secunia.com/advisories/37079 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5
s.opensuse.org/opensuse-security-announce/2009-11/msg00004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/53795 - http://www.debian.org/security/2010/dsa-2028 - http://www.debian.org/security/2010/dsa-2050 - http://secunia.com/advisories/37159 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html - https://rhn.redhat.com/errata/RHSA-2009-1512.html - http://secunia.com/advisories/37114 - http://secunia.com/advisories/37077 - http://securitytracker.com/id?1023029 - https://rhn.redhat.com/errata/R
es/37114 - http://secunia.com/advisories/37077 - http://securitytracker.com/id?1023029 - https://rhn.redhat.com/errata/RHSA-2009-1503.html - http://cgit.freedesktop.org/poppler/poppler/diff/?id=284a928996&id2=75c3466ba2 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:175 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10969 - http://secunia.com/advisories/37037 - http://www.vupen.com/english/advisories/2010/1040 - http://www.ubuntu.com/usn/USN-850-3 - http://www.vupen.com/english/advisories/2010/0802 - https://rhn.redhat.com/errata/RHSA-2009-1502.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html -
t.com/errata/RHSA-2009-1502.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html - http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb2 - https://rhn.redhat.com/errata/RHSA-2009-1500.html - http://www.vupen.com/english/advisories/2009/2928 - https://bugzilla.redhat.com/show_bug.cgi?id=526911 - http://secunia.com/advisories/37023 - http://www.vupen.com/english/advisories/2009/2924 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:087 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1 - http://www.vupen.com/english/advisories/2010/1220 - http://www.ubuntu.com/usn/USN-850-1 - http://secunia.com/advisories/37053 - ht
.vupen.com/english/advisories/2010/1220 - http://www.ubuntu.com/usn/USN-850-1 - http://secunia.com/advisories/37053 - http://secunia.com/advisories/39327 - http://secunia.com/advisories/37043 - http://www.securityfocus.com/bid/36703
CVE ID: CVE-2009-3605 State: PUBLISHED Published: 2009-11-02T15:00:00 Last Updated: 2024-08-07T06:31:10.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, related to (1) glib/poppler-page.cc; (2) ArthurOutputDev.cc, (3) CairoOutputDev.cc, (4) GfxState.cc, (5) JBIG2Stream.cc, (6) PSOutputDev.cc, and (7) SplashOutputDev.cc in poppler/; and (8) SplashBitmap.cc, (9) Splash.cc, and (10) SplashFTFont.cc in splash/. NOTE: this may overlap CVE-2009-0791. Additional Analyst Notes: - CVE Program Containe
(10) SplashFTFont.cc in splash/. NOTE: this may overlap CVE-2009-0791. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/ubuntu/+archive/primary/+files/poppler_0.8.7-1ubuntu0.4.diff.gz - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html - http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb22f812b31858e519411f57747d39bd8 - http://cgit.freedesktop.org/poppler/poppler/commit/?id=7b2d314a61fd0e12f47c62996cb49ec0d1ba747a - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1 - http://secunia.com/advisories/37114 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:175 - https://oval.cisecurity.org
nia.com/advisories/37114 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:175 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7731 - https://launchpad.net/ubuntu/+archive/primary/+files/poppler_0.10.5-1ubuntu2.4.diff.gz - http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1 - http://www.ubuntu.com/usn/USN-850-1 - https://bugs.launchpad.net/bugs/cve/2009-3605 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:334 - https://bugzilla.redhat.com/show_bug.cgi?id=491840 - http://cgit.freedesktop.org/poppler/poppler/commit/?id=284a92899602daa4a7f429e61849e794569310b5
CVE ID: CVE-2009-3606 State: PUBLISHED Published: 2009-10-21T17:00:00 Last Updated: 2024-08-07T06:31:11.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39938 - http://secunia.com/advisories/37042 - ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch - http://www.debian.org/security/2009/dsa-1941 - http://www.mandriva.com/security/advi
s.com/pub/xpdf/xpdf-3.02pl4.patch - http://www.debian.org/security/2009/dsa-1941 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:287 - http://www.openwall.com/lists/oss-security/2009/12/01/6 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html - http://cgit.freedesktop.org/poppler/poppler/diff/poppler/PSOutputDev.cc?id=7b2d314a61 - https://rhn.redhat.com/errata/RHSA-2009-1501.html - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html - http://www.debian.org/security/2010/dsa-2028 - http://www.debian.org/security/2010/dsa-2050 - https://ova
sg00004.html - http://www.debian.org/security/2010/dsa-2028 - http://www.debian.org/security/2010/dsa-2050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11289 - http://www.openwall.com/lists/oss-security/2009/12/01/1 - http://secunia.com/advisories/37159 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7836 - http://secunia.com/advisories/37077 - http://securitytracker.com
/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7836 - http://secunia.com/advisories/37077 - http://securitytracker.com/id?1023029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53798 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:175 - http://secunia.com/advisories/37037 - http://www.vupen.com/english/advisories/2010/1040 - http://www.vupen.com/english/advisories/2010/0802 - https://rhn.redhat.com/errata/RHSA-2009-1502.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html - https://rhn.redhat.com/errata/RHSA-2009-1500.html - http://www.vupen.com/english/advisories/2009/2928 - http://secunia.com/advisories/37023 - http://www.openwa
-1500.html - http://www.vupen.com/english/advisories/2009/2928 - http://secunia.com/advisories/37023 - http://www.openwall.com/lists/oss-security/2009/12/01/5 - http://www.vupen.com/english/advisories/2009/2924 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:087 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1 - http://www.vupen.com/english/advisories/2010/1220 - http://secunia.com/advisories/37053 - http://secunia.com/advisories/39327 - http://secunia.com/advisories/37043 - http://www.securityfocus.com/bid/36703 - https://bugzilla.redhat.com/show_bug.cgi?id=526877
CVE ID: CVE-2009-3607 State: PUBLISHED Published: 2009-10-21T17:00:00 Last Updated: 2024-08-07T06:31:10.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1941 - http://www.openwall.com/lists/oss-security/2009/12/01/6 - https
rences: - http://www.debian.org/security/2009/dsa-1941 - http://www.openwall.com/lists/oss-security/2009/12/01/6 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html - http://www.securityfocus.com/bid/36718 - http://www.openwall.com/lists/oss-security/2009/12/01/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53801 - http://secunia.com/advisories/37159 - http://secunia.com/advisories/37054 - https://bugzilla.redhat.com/show_bug.cgi?id=526924 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html - http://secunia.com/advisories/37114 - http://www.mandri
om/archives/fedora-package-announce/2009-October/msg00784.html - http://secunia.com/advisories/37114 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:175 - http://www.ubuntu.com/usn/USN-850-3 - http://www.openwall.com/lists/oss-security/2009/12/01/5 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1 - http://www.ubuntu.com/usn/USN-850-1 - http://cgit.freedesktop.org/poppler/poppler/commit/?id=c839b706 - http://www.vupen.com/english/advisories/2009/2925
CVE ID: CVE-2009-3608 State: PUBLISHED Published: 2009-10-21T17:00:00 Last Updated: 2024-08-07T06:31:10.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39938 - https://rhn.redhat.com/errata/RHSA-2009-1504.html - ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch - http://www.deb