deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-3718
Published: 2009-10-16
Description: SQL injection vulnerability in admin/authenticate.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to execute arbitrary SQL commands via the UserName parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://full-discl0sure.blogspot.com/2009/07/battle-blog-sqlhtml-injection.html; http://secunia.com/advisories/35864; http://www.exploit-db.com/exploits/9183
CVE: CVE-2009-3719
Published: 2009-10-16
Description: Cross-site scripting (XSS) vulnerability in comment.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to inject arbitrary web script or HTML via a comment.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://full-discl0sure.blogspot.com/2009/07/battle-blog-sqlhtml-injection.html; http://secunia.com/advisories/35864; http://www.exploit-db.com/exploits/9183
CVE: CVE-2009-3704
Published: 2009-10-16
Description: ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service (crash) via a SIP INVITE request with an empty Call-Info header.
CVSS Score: 5.0 (MEDIUM)
References: http://packetstormsecurity.org/0910-exploits/zoiper_dos.py.txt; http://secunia.com/advisories/37015; https://exchange.xforce.ibmcloud.com/vulnerabilities/53792
CVE: CVE-2005-4881
Published: 2009-10-19
Description: The netlink subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.13-rc1 does not initialize certain padding fields in structures, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors, related to the (1) tc_fill_qdisc, (2) tcf_fill_node, (3) neightbl_fill_info, (4) neightbl_fill_param_info, (5) neigh_fill_info, (6) rtnetlink_fill_ifinfo, (7) rtnetlink_fill_iwinfo, (8) vif_delete, (9) ipmr_destroy_unres, (10) ipmr_cache_alloc_unres, (11) ipmr_cache_resolve, (12) inet6_fill_ifinfo, (13) tca_get_fill, (14) tca_action_flush, (15) tcf_add_notify, (16) tc_dump_action, (17) cbq_dump_police, (18) __nlmsg_put, (19) __rta_fill, (20) __rta_reserve, (21) inet6_fill_prefix, (22) rsvp_dump, and (23) cbq_dump_ovl functions.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=0f3f2328f63c521fe4b435f148687452f98b2349; http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=30e744716c4a6cc4e8ecaaddf68f20057c03dc8d; http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=3408cce0c2f[PII_REDACTED]96420ca566704452fb5
CVE: CVE-2006-6404
Published: 2009-10-19
Description: INNOVATION Data Processing FDR/UPSTREAM 3.3.0 (GA Oct 2003) allows remote attackers to cause a denial of service (service outage) via a sequence of TCP SYN packets to many ports, as demonstrated using nmap. NOTE: the vendor's testing reportedly found that no denial of service occurred.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/ref/30/30782-fdr_portscan.txt; http://www.attrition.org/pipermail/vim/2009-October/002278.html; http://www.osvdb.org/30782
CVE: CVE-2009-2970
Published: 2009-10-19
Description: Stack-based buffer overflow in the GetUiDllVersion function in an ActiveX control in UiCheck.dll before 1.0.0.7 in UiTV UiPlayer, as used in BaiduX and other products, allows remote attackers to execute arbitrary code via the filename parameter.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.nsfocus.com/en/advisories/0901.html; http://www.securityfocus.com/archive/1/507236/100/0/threaded; http://www.nsfocus.com/en/advisories/0901.html
CVE: CVE-2009-3228
Published: 2009-10-19
Description: The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9 does not initialize certain (1) tcm__pad1 and (2) tcm__pad2 structure members, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors.
CVSS Score: 2.1 (LOW)
CWE: CWE-909
References: http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=096ed17f20affc2db0e307658c69b67433992a7a; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16ebb5e0b36ceadc8186f71d68b0c4fa4b6e781b; http://lists.vmware.com/pipermail/security-announce/2010/000082.html
CVE: CVE-2009-3546
Published: 2009-10-19
Description: The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=oss-security&m=[PII_REDACTED]3923&w=2; http://secunia.com/advisories/37069; http://secunia.com/advisories/37080
CVE: CVE-2009-3612
Published: 2009-10-19
Description: The tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcm__pad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors.  NOTE: this issue exists because of an incomplete fix for CVE-2005-4881.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad61df918c[PII_REDACTED]4891d5082c63e79c256a; http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
CVE: CVE-2009-3613
Published: 2009-10-19
Description: The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service (IOMMU space exhaustion and system crash) by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://bugzilla.kernel.org/show_bug.cgi?id=9468; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=97d477a914b146e7e6722ded21afa79886ae8ccd; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a866bbf6aacf95f[PII_REDACTED]42a20be118ce905
CVE: CVE-2009-2979
Published: 2009-10-19
Description: Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 do not properly perform XMP-XML entity expansion, which allows remote attackers to cause a denial of service via a crafted document.
CVSS Score: 4.3 (MEDIUM)
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2980
Published: 2009-10-19
Description: Integer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2981
Published: 2009-10-19
Description: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2982
Published: 2009-10-19
Description: An unspecified certificate in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow remote attackers to conduct a "social engineering attack" via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-310
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2983
Published: 2009-10-19
Description: Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2984
Published: 2009-10-19
Description: Unspecified vulnerability in the image decoder in Adobe Acrobat 9.x before 9.2, and possibly 7.x through 7.1.4 and 8.x through 8.1.7, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2985
Published: 2009-10-19
Description: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2996.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2986
Published: 2009-10-19
Description: Multiple heap-based buffer overflows in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2987
Published: 2009-10-19
Description: Unspecified vulnerability in an ActiveX control in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Windows allows remote attackers to cause a denial of service via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2988
Published: 2009-10-19
Description: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which allows attackers to cause a denial of service via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2989
Published: 2009-10-19
Description: Integer overflow in Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2990
Published: 2009-10-19
Description: Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2991
Published: 2009-10-19
Description: Unspecified vulnerability in the Mozilla plug-in in Adobe Reader and Acrobat 8.x before 8.1.7, and possibly 7.x before 7.1.4 and 9.x before 9.2, might allow remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2992
Published: 2009-10-19
Description: An unspecified ActiveX control in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 does not properly validate input, which allows attackers to cause a denial of service via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2993
Published: 2009-10-19
Description: The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 does not properly implement the (1) Privileged Context and (2) Safe Path restrictions for unspecified JavaScript methods, which allows remote attackers to create arbitrary files, and possibly execute arbitrary code, via the cPath parameter in a crafted PDF file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.kb.cert.org/vuls/id/257117
CVE: CVE-2009-2994
Published: 2009-10-19
Description: Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2995
Published: 2009-10-19
Description: Integer overflow in Adobe Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of service via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2996
Published: 2009-10-19
Description: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2985.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2997
Published: 2009-10-19
Description: Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2998
Published: 2009-10-19
Description: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-3458.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-3458
Published: 2009-10-19
Description: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2998.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-3460
Published: 2009-10-19
Description: Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-3461
Published: 2009-10-19
Description: Unspecified vulnerability in Adobe Acrobat 9.x before 9.2 allows attackers to bypass intended file-extension restrictions via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-3462
Published: 2009-10-19
Description: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Unix, when Debug mode is enabled, allow attackers to execute arbitrary code via unspecified vectors, related to a "format bug."
CVSS Score: 5.1 (MEDIUM)
References: http://securitytracker.com/id?1023007; http://www.adobe.com/support/security/bulletins/apsb09-15.html; http://www.securityfocus.com/bid/36638
CVE: CVE-2009-2909
Published: 2009-10-20
Description: Integer signedness error in the ax25_setsockopt function in net/ax25/af_ax25.c in the ax25 subsystem in the Linux kernel before 2.6.31.2 allows local users to cause a denial of service (OOPS) via a crafted optlen value in an SO_BINDTODEVICE operation.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-189
References: http://article.gmane.org/gmane.linux.kernel/896907; http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=b7058842c940ad2c08dd829b21e5c92ebe3b8758; http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html
CVE: CVE-2009-2910
Published: 2009-10-20
Description: arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier process by switching an ia32 process to 64-bit mode.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/x86/linux-2.6-tip.git%3Ba=commit%3Bh=24e35800cdc4350fc34e2bed37b608a9e13ab3b6; http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html
CVE: CVE-2009-3296
Published: 2009-10-20
Description: Multiple integer overflows in tiffread.c in CamlImages 2.2 might allow remote attackers to execute arbitrary code via TIFF images containing large width and height values that trigger heap-based buffer overflows.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/37067; http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.2.0-4+lenny3.diff.gz; http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.20-8+etch3.diff.gz
CVE: CVE-2009-3615
Published: 2009-10-20
Description: The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM IM client.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://developer.pidgin.im/ticket/10481; http://developer.pidgin.im/viewmtn/revision/info/781682333aea0c801d280c3507ee25552a60bfc0; http://developer.pidgin.im/wiki/ChangeLog
CVE: CVE-2009-3617
Published: 2009-10-20
Description: Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, when logging is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a download URI.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.6 (HIGH)
CWE: CWE-134
References: http://aria2.svn.sourceforge.net/viewvc/aria2/trunk/NEWS?revision=1586; http://aria2.svn.sourceforge.net/viewvc/aria2/trunk/src/AbstractCommand.cc?r1=1539&r2=1572; http://marc.info/?l=oss-security&m=[PII_REDACTED]8906&w=2
CVE: CVE-2009-3730
Published: 2009-10-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in the ReqWeb Help feature (aka the Web Client Help system) in IBM Rational RequisitePro 7.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the operation parameter to ReqWebHelp/advanced/workingSet.jsp, or the (2) searchWord, (3) maxHits, (4) scopedSearch, or (5) scope parameter to ReqWebHelp/basic/searchView.jsp.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/59088; http://osvdb.org/59089; http://secunia.com/advisories/37052
CVE: CVE-2009-3603
Published: 2009-10-21
Description: Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1188.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch; http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html
CVE: CVE-2009-3604
Published: 2009-10-21
Description: The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch; http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb2; http://cgit.freedesktop.org/poppler/poppler/diff/?id=284a928996&id2=75c3466ba2
CVE: CVE-2009-3606
Published: 2009-10-21
Description: Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch; http://cgit.freedesktop.org/poppler/poppler/diff/poppler/PSOutputDev.cc?id=7b2d314a61; http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html
CVE: CVE-2009-3607
Published: 2009-10-21
Description: Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://cgit.freedesktop.org/poppler/poppler/commit/?id=c839b706; http://secunia.com/advisories/37054; http://secunia.com/advisories/37114
CVE: CVE-2009-3608
Published: 2009-10-21
Description: Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch; http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html