Every CVESearch/Get API key

CVE-2009-0195

Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products,...

6.8 MediumFix available

CVE-2009-0195 is a medium vulnerability (CVSS 6.8) in Apple Cups, published April 23, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.37%, the 92nd percentile. Fixed in xpdf 3.02-1.4+lenny1.

What does this mean?
Severity
6.8 MediumCVSS 2.0, NVD
Exploit chance
5.37%EPSS, 92nd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
3.02-1.4+lenny1xpdf +134 more

Description

Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.

Exploit likelihood

5.37%Down 3.8 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xpdf
Debian:12
before 3.02-1.4+lenny1
3.02-1.4+lenny1
xpdf
Debian:13
before 3.02-1.4+lenny1
3.02-1.4+lenny1
xpdf
Debian:14
before 3.02-1.4+lenny1
3.02-1.4+lenny1
xpdf
Debian:4.0
From an advisory covering 12 CVEs
before 3.01-9.1+etch6, plus listed versions
3.01-93.01-9.1+etch23.01-9.1+etch43.01-9.1+etch53.01-9etch1
3.01-9.1+etch6
xpdf
Debian:5.0
From an advisory covering 12 CVEs
before 3.02-1.4+lenny1, plus listed versions
3.02-1.4
3.02-1.4+lenny1
cups
Red Hat:enterprise_linux:4::as
From an advisory covering 12 CVEs
before 1:1.1.22-0.rc1.9.27.el4_7.5
1:1.1.22-0.rc1.9.27.el4_7.5
cups-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 12 CVEs
before 1:1.1.22-0.rc1.9.27.el4_7.5
1:1.1.22-0.rc1.9.27.el4_7.5
cups-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 12 CVEs
before 1:1.1.22-0.rc1.9.27.el4_7.5
1:1.1.22-0.rc1.9.27.el4_7.5
cups-libs
Red Hat:enterprise_linux:4::as
From an advisory covering 12 CVEs
before 1:1.1.22-0.rc1.9.27.el4_7.5
1:1.1.22-0.rc1.9.27.el4_7.5
cups
Red Hat:enterprise_linux:4::desktop
From an advisory covering 12 CVEs
before 1:1.1.22-0.rc1.9.27.el4_7.5
1:1.1.22-0.rc1.9.27.el4_7.5
Show 125 moreShow less
Affected packages
PackageAffectedFixed
cups-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 12 CVEs
before 1:1.1.22-0.rc1.9.27.el4_7.5
1:1.1.22-0.rc1.9.27.el4_7.5
cups-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 12 CVEs
before 1:1.1.22-0.rc1.9.27.el4_7.5
1:1.1.22-0.rc1.9.27.el4_7.5
cups-libs
Red Hat:enterprise_linux:4::desktop
From an advisory covering 12 CVEs
before 1:1.1.22-0.rc1.9.27.el4_7.5
1:1.1.22-0.rc1.9.27.el4_7.5
cups
Red Hat:enterprise_linux:4::es
From an advisory covering 12 CVEs
before 1:1.1.22-0.rc1.9.27.el4_7.5
1:1.1.22-0.rc1.9.27.el4_7.5
cups-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 12 CVEs
before 1:1.1.22-0.rc1.9.27.el4_7.5
1:1.1.22-0.rc1.9.27.el4_7.5
cups-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 12 CVEs
before 1:1.1.22-0.rc1.9.27.el4_7.5
1:1.1.22-0.rc1.9.27.el4_7.5
cups-libs
Red Hat:enterprise_linux:4::es
From an advisory covering 12 CVEs
before 1:1.1.22-0.rc1.9.27.el4_7.5
1:1.1.22-0.rc1.9.27.el4_7.5
cups
Red Hat:enterprise_linux:4::ws
From an advisory covering 12 CVEs
before 1:1.1.22-0.rc1.9.27.el4_7.5
1:1.1.22-0.rc1.9.27.el4_7.5
cups-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 12 CVEs
before 1:1.1.22-0.rc1.9.27.el4_7.5
1:1.1.22-0.rc1.9.27.el4_7.5
cups-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 12 CVEs
before 1:1.1.22-0.rc1.9.27.el4_7.5
1:1.1.22-0.rc1.9.27.el4_7.5
cups-libs
Red Hat:enterprise_linux:4::ws
From an advisory covering 12 CVEs
before 1:1.1.22-0.rc1.9.27.el4_7.5
1:1.1.22-0.rc1.9.27.el4_7.5
cups
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 12 CVEs
before 1:1.3.7-8.el5_3.4
1:1.3.7-8.el5_3.4
cups-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 12 CVEs
before 1:1.3.7-8.el5_3.4
1:1.3.7-8.el5_3.4
cups-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 12 CVEs
before 1:1.3.7-8.el5_3.4
1:1.3.7-8.el5_3.4
cups
Red Hat:enterprise_linux:5::client
From an advisory covering 12 CVEs
before 1:1.3.7-8.el5_3.4
1:1.3.7-8.el5_3.4
cups-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 12 CVEs
before 1:1.3.7-8.el5_3.4
1:1.3.7-8.el5_3.4
cups-libs
Red Hat:enterprise_linux:5::client
From an advisory covering 12 CVEs
before 1:1.3.7-8.el5_3.4
1:1.3.7-8.el5_3.4
cups-lpd
Red Hat:enterprise_linux:5::client
From an advisory covering 12 CVEs
before 1:1.3.7-8.el5_3.4
1:1.3.7-8.el5_3.4
cups
Red Hat:enterprise_linux:5::server
From an advisory covering 12 CVEs
before 1:1.3.7-8.el5_3.4
1:1.3.7-8.el5_3.4
cups-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 12 CVEs
before 1:1.3.7-8.el5_3.4
1:1.3.7-8.el5_3.4
cups-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 12 CVEs
before 1:1.3.7-8.el5_3.4
1:1.3.7-8.el5_3.4
cups-libs
Red Hat:enterprise_linux:5::server
From an advisory covering 12 CVEs
before 1:1.3.7-8.el5_3.4
1:1.3.7-8.el5_3.4
cups-lpd
Red Hat:enterprise_linux:5::server
From an advisory covering 12 CVEs
before 1:1.3.7-8.el5_3.4
1:1.3.7-8.el5_3.4
xpdf
Red Hat:enterprise_linux:3::as
From an advisory covering 11 CVEs
before 1:2.02-14.el3
1:2.02-14.el3
xpdf-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 11 CVEs
before 1:2.02-14.el3
1:2.02-14.el3
xpdf
Red Hat:enterprise_linux:3::desktop
From an advisory covering 11 CVEs
before 1:2.02-14.el3
1:2.02-14.el3
xpdf-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 11 CVEs
before 1:2.02-14.el3
1:2.02-14.el3
xpdf
Red Hat:enterprise_linux:3::es
From an advisory covering 11 CVEs
before 1:2.02-14.el3
1:2.02-14.el3
xpdf-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 11 CVEs
before 1:2.02-14.el3
1:2.02-14.el3
xpdf
Red Hat:enterprise_linux:3::ws
From an advisory covering 11 CVEs
before 1:2.02-14.el3
1:2.02-14.el3
xpdf-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 11 CVEs
before 1:2.02-14.el3
1:2.02-14.el3
xpdf
Red Hat:enterprise_linux:4::as
From an advisory covering 11 CVEs
before 1:3.00-20.el4
1:3.00-20.el4
xpdf-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 11 CVEs
before 1:3.00-20.el4
1:3.00-20.el4
xpdf
Red Hat:enterprise_linux:4::desktop
From an advisory covering 11 CVEs
before 1:3.00-20.el4
1:3.00-20.el4
xpdf-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 11 CVEs
before 1:3.00-20.el4
1:3.00-20.el4
xpdf
Red Hat:enterprise_linux:4::es
From an advisory covering 11 CVEs
before 1:3.00-20.el4
1:3.00-20.el4
xpdf-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 11 CVEs
before 1:3.00-20.el4
1:3.00-20.el4
xpdf
Red Hat:enterprise_linux:4::ws
From an advisory covering 11 CVEs
before 1:3.00-20.el4
1:3.00-20.el4
xpdf-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 11 CVEs
before 1:3.00-20.el4
1:3.00-20.el4
kdegraphics
Red Hat:enterprise_linux:4::as
From an advisory covering 11 CVEs
before 7:3.3.1-13.el4
7:3.3.1-13.el4
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 11 CVEs
before 7:3.3.1-13.el4
7:3.3.1-13.el4
kdegraphics-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 11 CVEs
before 7:3.3.1-13.el4
7:3.3.1-13.el4
kdegraphics
Red Hat:enterprise_linux:4::desktop
From an advisory covering 11 CVEs
before 7:3.3.1-13.el4
7:3.3.1-13.el4
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 11 CVEs
before 7:3.3.1-13.el4
7:3.3.1-13.el4
kdegraphics-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 11 CVEs
before 7:3.3.1-13.el4
7:3.3.1-13.el4
kdegraphics
Red Hat:enterprise_linux:4::es
From an advisory covering 11 CVEs
before 7:3.3.1-13.el4
7:3.3.1-13.el4
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 11 CVEs
before 7:3.3.1-13.el4
7:3.3.1-13.el4
kdegraphics-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 11 CVEs
before 7:3.3.1-13.el4
7:3.3.1-13.el4
kdegraphics
Red Hat:enterprise_linux:4::ws
From an advisory covering 11 CVEs
before 7:3.3.1-13.el4
7:3.3.1-13.el4
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 11 CVEs
before 7:3.3.1-13.el4
7:3.3.1-13.el4
kdegraphics-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 11 CVEs
before 7:3.3.1-13.el4
7:3.3.1-13.el4
kdegraphics
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 11 CVEs
before 7:3.5.4-12.el5_3
7:3.5.4-12.el5_3
kdegraphics-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 11 CVEs
before 7:3.5.4-12.el5_3
7:3.5.4-12.el5_3
kdegraphics-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 11 CVEs
before 7:3.5.4-12.el5_3
7:3.5.4-12.el5_3
kdegraphics
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 7:3.5.4-12.el5_3
7:3.5.4-12.el5_3
kdegraphics-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 7:3.5.4-12.el5_3
7:3.5.4-12.el5_3
kdegraphics
Red Hat:rhel_productivity:5
From an advisory covering 11 CVEs
before 7:3.5.4-12.el5_3
7:3.5.4-12.el5_3
kdegraphics-debuginfo
Red Hat:rhel_productivity:5
From an advisory covering 11 CVEs
before 7:3.5.4-12.el5_3
7:3.5.4-12.el5_3
kdegraphics-devel
Red Hat:rhel_productivity:5
From an advisory covering 11 CVEs
before 7:3.5.4-12.el5_3
7:3.5.4-12.el5_3
gpdf
Red Hat:enterprise_linux:4::as
From an advisory covering 12 CVEs
before 0:2.8.2-7.7.2.el4_7.4
0:2.8.2-7.7.2.el4_7.4
gpdf-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 12 CVEs
before 0:2.8.2-7.7.2.el4_7.4
0:2.8.2-7.7.2.el4_7.4
gpdf
Red Hat:enterprise_linux:4::desktop
From an advisory covering 12 CVEs
before 0:2.8.2-7.7.2.el4_7.4
0:2.8.2-7.7.2.el4_7.4
gpdf-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 12 CVEs
before 0:2.8.2-7.7.2.el4_7.4
0:2.8.2-7.7.2.el4_7.4
gpdf
Red Hat:enterprise_linux:4::es
From an advisory covering 12 CVEs
before 0:2.8.2-7.7.2.el4_7.4
0:2.8.2-7.7.2.el4_7.4
gpdf-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 12 CVEs
before 0:2.8.2-7.7.2.el4_7.4
0:2.8.2-7.7.2.el4_7.4
gpdf
Red Hat:enterprise_linux:4::ws
From an advisory covering 12 CVEs
before 0:2.8.2-7.7.2.el4_7.4
0:2.8.2-7.7.2.el4_7.4
gpdf-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 12 CVEs
before 0:2.8.2-7.7.2.el4_7.4
0:2.8.2-7.7.2.el4_7.4
poppler
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 16 CVEs
before 0:0.5.4-4.4.el5_3.9
0:0.5.4-4.4.el5_3.9
poppler-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 16 CVEs
before 0:0.5.4-4.4.el5_3.9
0:0.5.4-4.4.el5_3.9
poppler-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 16 CVEs
before 0:0.5.4-4.4.el5_3.9
0:0.5.4-4.4.el5_3.9
poppler
Red Hat:enterprise_linux:5::client
From an advisory covering 16 CVEs
before 0:0.5.4-4.4.el5_3.9
0:0.5.4-4.4.el5_3.9
poppler-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 16 CVEs
before 0:0.5.4-4.4.el5_3.9
0:0.5.4-4.4.el5_3.9
poppler-utils
Red Hat:enterprise_linux:5::client
From an advisory covering 16 CVEs
before 0:0.5.4-4.4.el5_3.9
0:0.5.4-4.4.el5_3.9
poppler
Red Hat:enterprise_linux:5::server
From an advisory covering 16 CVEs
before 0:0.5.4-4.4.el5_3.9
0:0.5.4-4.4.el5_3.9
poppler-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 16 CVEs
before 0:0.5.4-4.4.el5_3.9
0:0.5.4-4.4.el5_3.9
poppler-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 16 CVEs
before 0:0.5.4-4.4.el5_3.9
0:0.5.4-4.4.el5_3.9
poppler-utils
Red Hat:enterprise_linux:5::server
From an advisory covering 16 CVEs
before 0:0.5.4-4.4.el5_3.9
0:0.5.4-4.4.el5_3.9
tetex
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-afm
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-doc
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-dvips
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-fonts
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-latex
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-xdvi
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-afm
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-doc
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-dvips
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-fonts
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-latex
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-xdvi
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-afm
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-doc
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-dvips
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-fonts
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-latex
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-xdvi
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-afm
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-doc
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-dvips
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-fonts
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-latex
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-xdvi
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex
Red Hat:enterprise_linux:5::client
From an advisory covering 17 CVEs
before 0:3.0-33.8.el5_5.5
0:3.0-33.8.el5_5.5
tetex-afm
Red Hat:enterprise_linux:5::client
From an advisory covering 17 CVEs
before 0:3.0-33.8.el5_5.5
0:3.0-33.8.el5_5.5
tetex-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 17 CVEs
before 0:3.0-33.8.el5_5.5
0:3.0-33.8.el5_5.5
tetex-doc
Red Hat:enterprise_linux:5::client
From an advisory covering 17 CVEs
before 0:3.0-33.8.el5_5.5
0:3.0-33.8.el5_5.5
tetex-dvips
Red Hat:enterprise_linux:5::client
From an advisory covering 17 CVEs
before 0:3.0-33.8.el5_5.5
0:3.0-33.8.el5_5.5
tetex-fonts
Red Hat:enterprise_linux:5::client
From an advisory covering 17 CVEs
before 0:3.0-33.8.el5_5.5
0:3.0-33.8.el5_5.5
tetex-latex
Red Hat:enterprise_linux:5::client
From an advisory covering 17 CVEs
before 0:3.0-33.8.el5_5.5
0:3.0-33.8.el5_5.5
tetex-xdvi
Red Hat:enterprise_linux:5::client
From an advisory covering 17 CVEs
before 0:3.0-33.8.el5_5.5
0:3.0-33.8.el5_5.5
tetex
Red Hat:enterprise_linux:5::server
From an advisory covering 17 CVEs
before 0:3.0-33.8.el5_5.5
0:3.0-33.8.el5_5.5
tetex-afm
Red Hat:enterprise_linux:5::server
From an advisory covering 17 CVEs
before 0:3.0-33.8.el5_5.5
0:3.0-33.8.el5_5.5
tetex-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 17 CVEs
before 0:3.0-33.8.el5_5.5
0:3.0-33.8.el5_5.5
tetex-doc
Red Hat:enterprise_linux:5::server
From an advisory covering 17 CVEs
before 0:3.0-33.8.el5_5.5
0:3.0-33.8.el5_5.5
tetex-dvips
Red Hat:enterprise_linux:5::server
From an advisory covering 17 CVEs
before 0:3.0-33.8.el5_5.5
0:3.0-33.8.el5_5.5
tetex-fonts
Red Hat:enterprise_linux:5::server
From an advisory covering 17 CVEs
before 0:3.0-33.8.el5_5.5
0:3.0-33.8.el5_5.5
tetex-latex
Red Hat:enterprise_linux:5::server
From an advisory covering 17 CVEs
before 0:3.0-33.8.el5_5.5
0:3.0-33.8.el5_5.5
tetex-xdvi
Red Hat:enterprise_linux:5::server
From an advisory covering 17 CVEs
before 0:3.0-33.8.el5_5.5
0:3.0-33.8.el5_5.5

What each source reports

NVD Score used6.8

Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.

Record
CVE-2009-0195
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE ListNo score

Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.

Record
CVE-2009-0195
Updated
2026-11-02
EUVDEUVD-2009-0204No score

Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.

Record
EUVD-2009-0204
Updated
2026-11-03
GitHub AdvisoriesGHSA-fvm9-xxrq-gwmcNo score

Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products,...

Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.

Record
GHSA-fvm9-xxrq-gwmc
Weakness
CWE-119
Updated
2026-11-02
OSVNo score

Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.

Record
CVE-2009-0195
Updated
2026-11-02
OSVDEBIAN-CVE-2009-0195No score

Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.

Record
DEBIAN-CVE-2009-0195
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 122 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open