CVE-2009-3607
EPSS 6.9%
Description
Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
How to fix CVE-2009-3607
To remediate CVE-2009-3607, upgrade the affected package to a fixed version below.
- Debian/poppler—upgrade to 0.12.2-1 or later
Is CVE-2009-3607 being exploited?
Moderate — EPSS is 6.9%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 0.12.2-1