Description

Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to "g*allocn."

Weaknesses 1

Affected Products 36

References 24

• bugs.gentoo.org http://bugs.gentoo.org/show_bug.cgi?id=263028
  Patch
• lists.apple.com http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
• lists.apple.com http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
• lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html
• lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
• lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
• secunia.com http://secunia.com/advisories/34852
• secunia.com http://secunia.com/advisories/34959
• secunia.com http://secunia.com/advisories/34991
• secunia.com http://secunia.com/advisories/35037
• secunia.com http://secunia.com/advisories/35065
• secunia.com http://secunia.com/advisories/35074
• secunia.com http://secunia.com/advisories/35685
• slackware.com http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477
• support.apple.com http://support.apple.com/kb/HT3549
• support.apple.com http://support.apple.com/kb/HT3639
• debian.org http://www.debian.org/security/2009/dsa-1790
• debian.org http://www.debian.org/security/2009/dsa-1793
• mandriva.com http://www.mandriva.com/security/advisories?name=MDVSA-2009:101
• securityfocus.com http://www.securityfocus.com/bid/34568
• us-cert.gov http://www.us-cert.gov/cas/techalerts/TA09-133A.html
  US Government Resource
• vupen.com http://www.vupen.com/english/advisories/2009/1297
• vupen.com http://www.vupen.com/english/advisories/2009/1621
• exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/50377

Remediation

• bugs.gentoo.org http://bugs.gentoo.org/show_bug.cgi?id=263028
  Patch