CVE-2009-3604
gir1.2-poppler-0.18: The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before3.02pl4, and Poppler 0.x, as used in GPdf and k...
CVE-2009-3604 is fixed in 9 products on 1 platform, first by gir1.2-poppler-0.18 0.12.2-2.1ubuntu1, released October 21, 2009. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0870
95th percentile
The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does notproperly allocate memory, which allows remote attackers to cause a denialof service (application crash) or possibly execute arbitrary code via acrafted PDF document that triggers a NULL pointer dereference or aheap-based buffer overflow.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| gir1.2-poppler-0.18 · Ubuntu 24.10 (oracular) | 0.12.2-2.1ubuntu1 | gir1.2-poppler-0.18 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| gir1.2-poppler-0.18 · Ubuntu 25.04 (plucky) | 0.12.2-2.1ubuntu1 | gir1.2-poppler-0.18 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler-cpp0t64 · Ubuntu 24.10 (oracular) | 0.12.2-2.1ubuntu1 | libpoppler-cpp0t64 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler-cpp1 · Ubuntu 25.04 (plucky) | 0.12.2-2.1ubuntu1 | libpoppler-cpp1 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler-glib8t64 · Ubuntu 24.10 (oracular) | 0.12.2-2.1ubuntu1 | libpoppler-glib8t64 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler-glib8t64 · Ubuntu 25.04 (plucky) | 0.12.2-2.1ubuntu1 | libpoppler-glib8t64 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler-qt5-1t64 · Ubuntu 24.10 (oracular) | 0.12.2-2.1ubuntu1 | libpoppler-qt5-1t64 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler-qt5-1t64 · Ubuntu 25.04 (plucky) | 0.12.2-2.1ubuntu1 | libpoppler-qt5-1t64 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler-qt6-3t64 · Ubuntu 24.10 (oracular) | 0.12.2-2.1ubuntu1 | libpoppler-qt6-3t64 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler-qt6-3t64 · Ubuntu 25.04 (plucky) | 0.12.2-2.1ubuntu1 | libpoppler-qt6-3t64 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler134 · Ubuntu 24.10 (oracular) | 0.12.2-2.1ubuntu1 | libpoppler134 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| libpoppler140 · Ubuntu 25.04 (plucky) | 0.12.2-2.1ubuntu1 | libpoppler140 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| poppler-utils · Ubuntu 24.10 (oracular) | 0.12.2-2.1ubuntu1 | poppler-utils 0.12.2-2.1ubuntu1 | Oct 21, 2009 |
| poppler-utils · Ubuntu 25.04 (plucky) | 0.12.2-2.1ubuntu1 | poppler-utils 0.12.2-2.1ubuntu1 | Oct 21, 2009 |