CVE-2009-1187
Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers...
Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).
- Record
CVE-2009-1187- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).
- Record
CVE-2009-1187- Updated
- 2026-11-02
EUVDEUVD-2009-1187 No score
Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).
- Record
EUVD-2009-1187- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xr2j-w2jp-cp5m No score
Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers...
Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).
- Record
GHSA-xr2j-w2jp-cp5m- Updated
- 2026-11-02
OSV No score
Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).
- Record
CVE-2009-1187- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-1187 No score
Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).
- Record
DEBIAN-CVE-2009-1187- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10360-1 No score
libpoppler-cpp0-0.49.0-1.1 on GA media
These are all security issues fixed in the libpoppler-cpp0-0.49.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10360-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
popplerDebian:12 |
before 0.10.6-1 | 0.10.6-1 |
popplerDebian:13 |
before 0.10.6-1 | 0.10.6-1 |
popplerDebian:14 |
before 0.10.6-1 | 0.10.6-1 |
popplerDebian:5.0 From an advisory covering 10 CVEs |
before 0.8.7-3, plus listed versions 0.8.7-10.8.7-2 |
0.8.7-3 |
popplerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 16 CVEs |
before 0:0.5.4-4.4.el5_3.9 | 0:0.5.4-4.4.el5_3.9 |
poppler-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 16 CVEs |
before 0:0.5.4-4.4.el5_3.9 | 0:0.5.4-4.4.el5_3.9 |
poppler-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 16 CVEs |
before 0:0.5.4-4.4.el5_3.9 | 0:0.5.4-4.4.el5_3.9 |
popplerRed Hat:enterprise_linux:5::client From an advisory covering 16 CVEs |
before 0:0.5.4-4.4.el5_3.9 | 0:0.5.4-4.4.el5_3.9 |
poppler-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 16 CVEs |
before 0:0.5.4-4.4.el5_3.9 | 0:0.5.4-4.4.el5_3.9 |
poppler-utilsRed Hat:enterprise_linux:5::client From an advisory covering 16 CVEs |
before 0:0.5.4-4.4.el5_3.9 | 0:0.5.4-4.4.el5_3.9 |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
popplerRed Hat:enterprise_linux:5::server From an advisory covering 16 CVEs |
before 0:0.5.4-4.4.el5_3.9 | 0:0.5.4-4.4.el5_3.9 |
poppler-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 16 CVEs |
before 0:0.5.4-4.4.el5_3.9 | 0:0.5.4-4.4.el5_3.9 |
poppler-develRed Hat:enterprise_linux:5::server From an advisory covering 16 CVEs |
before 0:0.5.4-4.4.el5_3.9 | 0:0.5.4-4.4.el5_3.9 |
poppler-utilsRed Hat:enterprise_linux:5::server From an advisory covering 16 CVEs |
before 0:0.5.4-4.4.el5_3.9 | 0:0.5.4-4.4.el5_3.9 |
poppleropenSUSE:Tumbleweed From an advisory covering 16 CVEs |
before 0.49.0-1.1 | 0.49.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-1187 is a medium vulnerability (CVSS 5.0) in Poppler, published April 23, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.17%, the 94th percentile. Fixed in poppler 0.10.6-1.
References
bugs.gentoo.org/show_bug.cgi?id=263028
bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875
secunia.com/advisories/35064
redhat.com/archives/fedora-package-announce/2009-July/msg00567.html
exchange.xforce.ibmcloud.com/vulnerabilities/50184
Show 99 moreShow less
poppler.freedesktop.org/releases.html
securityfocus.com/bid/34568
mandriva.com/security/advisories?name=MDVSA-2011:175
kb.cert.org/vuls/id/196617
vupen.com/english/advisories/2010/1040
wiki.rpath.com/Advisories:rPSA-2009-0059
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10292
nvd.nist.gov/vuln/detail/CVE-2009-1187
access.redhat.com/errata/RHSA-2009:0480
bugzilla.redhat.com/show_bug.cgi?id=495906
github.com/advisories/GHSA-xr2j-w2jp-cp5m
security-tracker.debian.org/tracker/CVE-2009-1187
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0480.json
cve.org/CVERecord?id=CVE-2009-0146
suse.com/security/cve/CVE-2009-0799