OSVDB ID: 54808

Title: Poppler JBIG2 Decoder SplashBitmap Handling Overflow

Info

Disclosure

Apr 16, 2009

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Patch / RCS
Disclosure: Vendor Verified

Solution

Products

Unknown or Incomplete

References

CERT VU: 196617
CVE ID: 2009-1188 (see also: NVD)
Bugtraq ID: 34568
Secunia Advisory ID: 34746 35064 35618 37082 38713 38721 39327 39938
ISS X-Force ID: 50185
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2009-04/0186.html
Vendor Specific News/Changelog Entry: http://bugs.gentoo.org/show_bug.cgi?id=263028#c16
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html
http://poppler.freedesktop.org/releases.html
http://sourceforge.net/mailarchive/message.php?msg_name=20100217093719.GA4948%40tiehlicka.suse.cz
http://wiki.rpath.com/Advisories:rPSA-2009-0059
https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html
https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00565.html
https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00597.html
Vendor Specific Advisory URL: http://www.debian.org/security/2010/dsa-2028
http://www.debian.org/security/2010/dsa-2050
Other Advisory URL: http://www.vupen.com/english/advisories/2009/1076
RedHat RHSA: RHSA-2009:0480

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/54808