{
  "cveId": "CVE-2009-3604",
  "url": "https://patchblox.com/security/cve/CVE-2009-3604",
  "summary": "CVE-2009-3604 is fixed in 9 products on 1 platform, first by gir1.2-poppler-0.18 0.12.2-2.1ubuntu1, released October 21, 2009. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "gir1.2-poppler-0.18: The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before3.02pl4, and Poppler 0.x, as used in GPdf and k...",
  "description": "The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does notproperly allocate memory, which allows remote attackers to cause a denialof service (application crash) or possibly execute arbitrary code via acrafted PDF document that triggers a NULL pointer dereference or aheap-based buffer overflow.",
  "published": "2009-10-21T00:00:00Z",
  "severity": "Medium",
  "epss": 0.08703,
  "epssPercentile": 0.95158,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "gir1.2-poppler-0.18",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "gir1.2-poppler-0.18 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-gir1.2-poppler-0.18-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "gir1.2-poppler-0.18",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "gir1.2-poppler-0.18 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-gir1.2-poppler-0.18-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler-cpp0t64",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler-cpp0t64 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libpoppler-cpp0t64-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler-cpp1",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler-cpp1 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libpoppler-cpp1-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler-glib8t64",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler-glib8t64 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libpoppler-glib8t64-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler-glib8t64",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler-glib8t64 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libpoppler-glib8t64-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler-qt5-1t64",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler-qt5-1t64 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libpoppler-qt5-1t64-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler-qt5-1t64",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler-qt5-1t64 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libpoppler-qt5-1t64-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler-qt6-3t64",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler-qt6-3t64 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libpoppler-qt6-3t64-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler-qt6-3t64",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler-qt6-3t64 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libpoppler-qt6-3t64-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler134",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler134 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libpoppler134-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler140",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler140 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libpoppler140-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "poppler-utils",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "poppler-utils 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-poppler-utils-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "poppler-utils",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "poppler-utils 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-poppler-utils-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}