{
  "cveId": "CVE-2009-3609",
  "url": "https://patchblox.com/security/cve/CVE-2009-3609",
  "summary": "CVE-2009-3609 is fixed in 9 products on 1 platform, first by gir1.2-poppler-0.18 0.12.2-2.1ubuntu1, released October 21, 2009. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "gir1.2-poppler-0.18: Integer overflow in the ImageStream::ImageStream function in Stream.cc inXpdf before 3.02pl4 and Poppler before 0.12....",
  "description": "Integer overflow in the ImageStream::ImageStream function in Stream.cc inXpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphicsKPDF, and CUPS pdftops, allows remote attackers to cause a denial ofservice (application crash) via a crafted PDF document that triggers a NULLpointer dereference or buffer over-read.",
  "published": "2009-10-21T00:00:00Z",
  "severity": "Medium",
  "epss": 0.04665,
  "epssPercentile": 0.91808,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "gir1.2-poppler-0.18",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "gir1.2-poppler-0.18 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-gir1.2-poppler-0.18-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "gir1.2-poppler-0.18",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "gir1.2-poppler-0.18 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-gir1.2-poppler-0.18-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler-cpp0t64",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler-cpp0t64 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libpoppler-cpp0t64-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler-cpp1",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler-cpp1 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libpoppler-cpp1-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler-glib8t64",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler-glib8t64 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libpoppler-glib8t64-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler-glib8t64",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler-glib8t64 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libpoppler-glib8t64-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler-qt5-1t64",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler-qt5-1t64 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libpoppler-qt5-1t64-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler-qt5-1t64",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler-qt5-1t64 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libpoppler-qt5-1t64-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler-qt6-3t64",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler-qt6-3t64 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libpoppler-qt6-3t64-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler-qt6-3t64",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler-qt6-3t64 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libpoppler-qt6-3t64-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler134",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler134 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libpoppler134-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpoppler140",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "libpoppler140 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libpoppler140-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "poppler-utils",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "poppler-utils 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-poppler-utils-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "poppler-utils",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.12.2-2.1ubuntu1",
      "fix": "poppler-utils 0.12.2-2.1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-poppler-utils-0.12.2-2.1ubuntu1",
      "released": "2009-10-21T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}