VDB
CVE-2009-4035
CVE-2009-4035
PUBLISHED
CVSS 9.300000190734863 CRITICAL
The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a crafted Type 1 font that can produce a negative value, leading to a signed-to-unsigned integer conversion error and a buffer overflow.
EPSS 3.78% · 89.6th percentile
Risk Scores
CVSS 2.0
9.300000190734863
EPSS Score
3.78%
89.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | * |
| gnome | gpdf | 2.8.2 |
| xpdf | xpdf | 3.0.0 |
| kde | kdegraphics | 3.3.1 |
| kde | kpdf | 3.3.1 |
Timeline
- Dec 21, 2009 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Sep 10, 2023 EPSS Score
References
- 37793 third-party-advisory
- SUSE-SR:2010:003 vendor-advisory
- RHSA-2009:1681 vendor-advisory
- 37641 third-party-advisory
- ADV-2009-3555 vdb
- 1023356 vdb
- RHSA-2009:1680 vendor-advisory
- 37350 vdb
- http://cgit.freedesktop.org/poppler/poppler/tree/fofi/FoFiType1.cc?id=4b4fc5c017bf147c9069bbce32fc14467bd2a81a url
- 37787 third-party-advisory
- xpdf-fofitype1parse-bo(54831) vdb
- 37781 third-party-advisory
- RHSA-2009:1682 vendor-advisory
- oval:org.mitre.oval:def:10996 vdb
- http://cgit.freedesktop.org/poppler/poppler/diff/fofi/FoFiType1.cc?id=4b4fc5c0 url
- https://bugzilla.redhat.com/show_bug.cgi?id=541614 url
- https://nvd.nist.gov/vuln/detail/CVE-2009-4035 advisory