CVE-2009-1179 describes an integer overflow vulnerability in the JBIG2 decoder affecting Xpdf, CUPS, Poppler, and other products. This flaw allows remote attackers to execute arbitrary code by enticing a user to open a specially crafted PDF file. With a CVSS score of 6.8, this vulnerability has a network attack vector, medium attack complexity, and can lead to partial compromise of confidentiality, integrity, and availability. While the FAUCET Risk Score is high at 90/100, there is no evidence of active exploitation, no known exploit code available in public databases like Metasploit or ExploitDB, and minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
0.5aCPE matchmatch criteria | cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:* | ||
0.7aCPE matchmatch criteria | cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:* | ||
0.91aCPE matchmatch criteria | cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:* | ||
0.91bCPE matchmatch criteria | cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:* | ||
0.91cCPE matchmatch criteria | cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.