CVE-2009-3607
Published: 21 October 2009
Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
poppler Launchpad, Ubuntu, Debian |
dapper |
Released
(0.5.1-0ubuntu7.6)
|
| hardy |
Released
(0.6.4-1ubuntu3.3)
|
|
| intrepid |
Released
(0.8.7-1ubuntu0.4)
|
|
| jaunty |
Released
(0.10.5-1ubuntu2.4)
|
|
| karmic |
Released
(0.12.0-0ubuntu2.1)
|
|
| upstream |
Needs triage
|
|
|
Patches: upstream: http://cgit.freedesktop.org/poppler/poppler/commit/?id=c839b706092583f6b12ed3cc634bf5af34b7a2bb |
||