CVE-2009-1180

EPSS 8.8%

Published: 4/23/2009Modified: 4/28/2026

Also known as:DEBIAN-CVE-2009-1180

Description

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.

Affected packages (2)

Debian/popplerfrom 0, < 0.10.6-1
Debian/xpdffrom 0, < 3.02-1.4+lenny1

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2009-1180