CVE-2009-3607

Publication date 21 October 2009

Last updated 24 July 2024

Ubuntu priority

Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
poppler	9.10 karmic	Fixed 0.12.0-0ubuntu2.1
	9.04 jaunty	Fixed 0.10.5-1ubuntu2.4
	8.10 intrepid	Fixed 0.8.7-1ubuntu0.4
	8.04 LTS hardy	Fixed 0.6.4-1ubuntu3.3
	6.06 LTS dapper	Fixed 0.5.1-0ubuntu7.6

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
poppler	Upstream: ?id=c83

References

Related Ubuntu Security Notices (USN)

USN-850-1
poppler vulnerabilities
21 October 2009

USN-850-3
poppler vulnerabilities
2 November 2009

Other references

https://www.cve.org/CVERecord?id=CVE-2009-3607