← Vulnerability feed

Vulnerability record · CVE-2009-1179 · published 23 April 2009

CVE-2009-1179: Foolabs xpdf vulnerability

FFoolabs · Xpdf

Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.

6.8 CVSS 2.0 Medium EPSS 5.5% · top 7.4% CWE-189 · CWE-189
6.8CVSS 2.0 base score
5.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
4Affected product versions listed by NVD
98References
16 Jun 2026Last modified by NVD

Description

Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
http://poppler.freedesktop.org/releases.html
http://rhn.redhat.com/errata/RHSA-2009-0458.html
http://secunia.com/advisories/34291 Vendor Advisory
http://secunia.com/advisories/34481 Vendor Advisory
http://secunia.com/advisories/34746 Vendor Advisory
http://secunia.com/advisories/34755 Vendor Advisory
http://secunia.com/advisories/34756 Vendor Advisory
http://secunia.com/advisories/34852 Vendor Advisory
http://secunia.com/advisories/34959 Vendor Advisory
http://secunia.com/advisories/34963 Vendor Advisory
http://secunia.com/advisories/34991 Vendor Advisory
http://secunia.com/advisories/35037 Vendor Advisory
http://secunia.com/advisories/35064 Vendor Advisory
http://secunia.com/advisories/35065 Vendor Advisory
http://secunia.com/advisories/35379 Vendor Advisory
http://secunia.com/advisories/35618 Vendor Advisory
http://secunia.com/advisories/35685 Vendor Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477
http://support.apple.com/kb/HT3613
http://support.apple.com/kb/HT3639
http://www.debian.org/security/2009/dsa-1790
http://www.debian.org/security/2009/dsa-1793
http://www.kb.cert.org/vuls/id/196617 US Government Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2009:101
http://www.mandriva.com/security/advisories?name=MDVSA-2010:087
http://www.mandriva.com/security/advisories?name=MDVSA-2011:175
http://www.redhat.com/support/errata/RHSA-2009-0429.html
http://www.redhat.com/support/errata/RHSA-2009-0430.html Patch
http://www.redhat.com/support/errata/RHSA-2009-0431.html
http://www.redhat.com/support/errata/RHSA-2009-0480.html
http://www.securityfocus.com/bid/34568
http://www.securitytracker.com/id?1022073
http://www.vupen.com/english/advisories/2009/1065 Vendor Advisory
http://www.vupen.com/english/advisories/2009/1066 Vendor Advisory
http://www.vupen.com/english/advisories/2009/1076 Vendor Advisory

Track CVE-2009-1179 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2009-0165Foolabs xpdf vulnerabilityInteger overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified i…EPSS 3.6%10.0CVE-2008-5184Apple cups vulnerabilityThe web interface (cgi-bin/admin.c) in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easie…EPSS 3.7%10.0CVE-2008-3641Apple cups vulnerabilityThe Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and …EPSS 24%10.0CVE-2008-0053Apple cups memory buffer overflow vulnerabilityMultiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a craft…EPSS 8.3%10.0CVE-2005-3625Easy software products cups vulnerabilityXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of servic…EPSS 3.8%9.8CVE-2012-6094Apple cups incorrect authorization vulnerabilitycups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized access to the systemEPSS 2.1%9.8CVE-2010-2941Apple cups use after free vulnerabilityipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote a…EPSS 6.4%9.8CVE-2004-2154Apple cups vulnerabilityCUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name …EPSS 2.1%

Source: NIST National Vulnerability Database (record CVE-2009-1179), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.