VULNERABILITY INTELLIGENCE

CVE-2009-3606

CVSS score9.3 NONE
EPSS probability8.63%
CISA KEVNot currently listed
Published2009-10-21
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.

Weakness classification

  • nvd@nist.gov: CWE-189

Primary references