Integer Overflow Vulnerability in Multiple Products from Various Vendors
CVE-2009-0791

Currently unrated

Key Information:

Vendor

Apple
Status
Cups
Vendor
CVE Published:
9 June 2009

What is CVE-2009-0791?

The vulnerability involves multiple integer overflow errors in Xpdf versions 2.x and 3.x, as well as Poppler version 0.x. These issues are exploited in the pdftops filter of CUPS versions 1.1.17, 1.1.22, and 1.3.7, allowing remote attackers to create malicious PDF files that trigger heap-based buffer overflows. Attackers leveraging this vulnerability could potentially crash applications or execute arbitrary code, with various components like Decrypt.cxx, FoFiTrueType.cxx, gmem.c, JBIG2Stream.cxx, and PSOutputDev.cxx noted as related vectors.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://securitytracker.com/id?1022326
vdb-entryx_refsource_SECTRACK
https://oval.cisecurity.org/repository/search/definition/...
vdb-entrysignaturex_refsource_OVAL
http://www.securityfocus.com/bid/35195
vdb-entryx_refsource_BID

EPSS Score

6% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.