CVE-2009-0791

CVE-2009-0791 describes multiple integer overflow vulnerabilities in Xpdf 2.x/3.x and Poppler 0.x, impacting products like CUPS, GPdf, and KPDF. A remote attacker can exploit this by crafting a malicious PDF file, leading to a denial of service (application crash) or potentially arbitrary code execution via a heap-based buffer overflow. With a CVSS score of 6.8, this vulnerability has a network attack vector, medium attack complexity, and high potential for confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.