CVE-2009-3603
gir1.2-poppler-0.18: Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.xbefore 3.02pl4 and Poppler before 0.12.1 might...
CVE-2009-3603 is fixed in 9 products on 1 platform, first by gir1.2-poppler-0.18 0.12.2-2.1ubuntu1, released October 21, 2009. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0858
95th percentile
Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.xbefore 3.02pl4 and Poppler before 0.12.1 might allow remote attackers toexecute arbitrary code via a crafted PDF document that triggers aheap-based buffer overflow. NOTE: some of these details are obtained fromthird party information. NOTE: this issue reportedly exists because of anincomplete fix for CVE-2009-1188.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| gir1.2-poppler-0.18 · Ubuntu 24.10 (oracular) | 0.12.2-2.1ubuntu1 | gir1.2-poppler-0.18 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| gir1.2-poppler-0.18 · Ubuntu 25.04 (plucky) | 0.12.2-2.1ubuntu1 | gir1.2-poppler-0.18 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler-cpp0t64 · Ubuntu 24.10 (oracular) | 0.12.2-2.1ubuntu1 | libpoppler-cpp0t64 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler-cpp1 · Ubuntu 25.04 (plucky) | 0.12.2-2.1ubuntu1 | libpoppler-cpp1 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler-glib8t64 · Ubuntu 24.10 (oracular) | 0.12.2-2.1ubuntu1 | libpoppler-glib8t64 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler-glib8t64 · Ubuntu 25.04 (plucky) | 0.12.2-2.1ubuntu1 | libpoppler-glib8t64 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler-qt5-1t64 · Ubuntu 24.10 (oracular) | 0.12.2-2.1ubuntu1 | libpoppler-qt5-1t64 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler-qt5-1t64 · Ubuntu 25.04 (plucky) | 0.12.2-2.1ubuntu1 | libpoppler-qt5-1t64 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler-qt6-3t64 · Ubuntu 24.10 (oracular) | 0.12.2-2.1ubuntu1 | libpoppler-qt6-3t64 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler-qt6-3t64 · Ubuntu 25.04 (plucky) | 0.12.2-2.1ubuntu1 | libpoppler-qt6-3t64 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler134 · Ubuntu 24.10 (oracular) | 0.12.2-2.1ubuntu1 | libpoppler134 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler140 · Ubuntu 25.04 (plucky) | 0.12.2-2.1ubuntu1 | libpoppler140 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| poppler-utils · Ubuntu 24.10 (oracular) | 0.12.2-2.1ubuntu1 | poppler-utils 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| poppler-utils · Ubuntu 25.04 (plucky) | 0.12.2-2.1ubuntu1 | poppler-utils 0.12.2-2.1ubuntu1 | Oct 21, 2009 |