Vulnerability in Poppler

CVE-2009-1187

Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).

EPSS: 0.072 (93.6th percentile) — read the EPSS interpretation.

Affected products

  • Poppler — versions 0.1, 0.1.1, 0.1.2
  • N/a — versions n/a

Weakness classification (CWE)

References