The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::~JBIG2SymbolDict and triggers an invalid memory dereference.

Several integer overflows, buffer overflows and memory allocation errors were discovered in the Poppler PDF rendering library, which may lead to denial of service or the execution of arbitrary code if a user is tricked into opening a malformed PDF document.

An update for the old stable distribution (etch) will be issued soon as version 0.4.5-5.1etch4.

This update of poppler: fix various security bugs that occur while decoding JBIG2 (CVE-2009-0146, CVE-2009-0147, CVE-2009-0165, CVE-2009-0166, CVE-2009-0799, CVE-2009-0800, CVE-2009-1179, CVE-2009-1180, CVE-2009-1181, CVE-2009-1182, CVE-2009-1183).

Further a denial of service bug in function FormWidgetChoice::loadDefaults() (CVE-2009-0755) and JBIG2Stream::readSymbolDictSeg() (CVE-2009-0756) was closed that could be triggered via malformed PDF files.

This update of poppler: fix various security bugs that occur while decoding JBIG2. (CVE-2009-0146 / CVE-2009-0147 / CVE-2009-0165 / CVE-2009-0166 / CVE-2009-0799 / CVE-2009-0800 / CVE-2009-1179 / CVE-2009-1180 / CVE-2009-1181 / CVE-2009-1182 / CVE-2009-1183)

Further a denial of service bug in function FormWidgetChoice::loadDefaults() (CVE-2009-0755) and JBIG2Stream::readSymbolDictSeg() (CVE-2009-0756) was closed that could be triggered via malformed PDF files.

A crafted PDF file that triggers a parsing error allows remote attackers to cause definal of service. This bug is consequence of a wrong processing on FormWidgetChoice::loadDefaults method (CVE-2009-0755).

A crafted PDF file that triggers a parsing error allows remote attackers to cause definal of service. This bug is consequence of an invalid memory dereference on JBIG2SymbolDict::~JBIG2SymbolDict destructor when JBIG2Stream::readSymbolDictSeg method is used (CVE-2009-0756).

This update provides fixes for those vulnerabilities.

This update does not apply for CVE-2009-0755 under Corporate Server 4.0 libpoppler0-0.4.1-3.7.20060mlcs4.

Update :

The previous packages were not signed, this new update fixes that issue.

ID	Name	Product	Family	Severity
44806	Debian DSA-1941-1 : poppler - several vulnerabilities	Nessus	Debian Local Security Checks	high
42030	openSUSE 10 Security Update : poppler (poppler-6319)	Nessus	SuSE Local Security Checks	critical
41578	SuSE 10 Security Update : poppler (ZYPP Patch Number 6315)	Nessus	SuSE Local Security Checks	critical
41427	SuSE 11 Security Update : libpoppler4 (SAT Patch Number 1034)	Nessus	SuSE Local Security Checks	critical
40267	openSUSE Security Update : libpoppler4 (libpoppler4-1032)	Nessus	SuSE Local Security Checks	critical
40042	openSUSE Security Update : libpoppler3 (libpoppler3-1035)	Nessus	SuSE Local Security Checks	critical
36675	Mandriva Linux Security Advisory : poppler (MDVSA-2009:068-1)	Nessus	Mandriva Local Security Checks	medium

Detections

Analytics

CVE-2009-0756

high

Tenable Plugins

high

critical

critical

critical

critical

critical

medium