| Title | JBIG2 デコーダにおけるバッファオーバーフローの脆弱性 |
|---|---|
| Summary | Xpdf、CUPS、Poppler などの製品の JBIG2 デコーダには、PDF ファイルの処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 |
| Possible impacts | 第三者にサービス運用妨害 (DoS) 状態にされる可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | April 16, 2009, midnight |
| Registration Date | May 28, 2009, 11:53 a.m. |
| Last Update | May 26, 2010, 4:28 p.m. |
| CVSS2.0 : 警告 | |
| Score | 4.3 |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:N/I:N/A:P |
| レッドハット |
| Red Hat Enterprise Linux 3 (as) |
| Red Hat Enterprise Linux 3 (es) |
| Red Hat Enterprise Linux 3 (ws) |
| Red Hat Enterprise Linux 4 (as) |
| Red Hat Enterprise Linux 4 (es) |
| Red Hat Enterprise Linux 4 (ws) |
| Red Hat Enterprise Linux 4.7 (as) |
| Red Hat Enterprise Linux 4.7 (es) |
| Red Hat Enterprise Linux 4.8 (as) |
| Red Hat Enterprise Linux 4.8 (es) |
| Red Hat Enterprise Linux 5 (server) |
| Red Hat Enterprise Linux Desktop 3.0 |
| Red Hat Enterprise Linux Desktop 4.0 |
| Red Hat Enterprise Linux Desktop 5.0 (client) |
| Red Hat Enterprise Linux EUS 5.3.z (server) |
| RHEL Desktop Workstation 5 (client) |
| RHEL Optional Productivity Applications 5 (server) |
| RHEL Optional Productivity Applications EUS 5.3.z (server) |
| サイバートラスト株式会社 |
| Asianux Server 3 (x86) |
| Asianux Server 3 (x86-64) |
| Asianux Server 3.0 |
| Asianux Server 3.0 (x86-64) |
| Asianux Server 4.0 |
| Asianux Server 4.0 (x86-64) |
| 日本電気 |
| InfoFrame DocumentSkipper |
| InfoFrame ImagingCore |
| Glyph & Cog, LLC |
| Xpdf 3.02pl2 およびそれ以前 |
| CUPS |
| CUPS 1.3.9 およびそれ以前 |
| freedesktop.org |
| Poppler 0.10.6 未満 |
| No | Changed Details | Date of change |
|---|---|---|
| 0 | [2009年05月28日] 掲載 [2009年07月03日] ベンダ情報:ミラクル・リナックス (poppler-0.5.4-4.4.9.1AXS3) を追加 [2009年12月07日] ベンダ情報:ミラクル・リナックス (kdegraphics-3.5.5-3.5AXS3) を追加 [2010年05月06日] 影響を受けるシステム:日本電気 (NV10-003) の情報を追加 ベンダ情報:日本電気 (NV10-003) を追加 [2010年05月26日] 影響を受けるシステム:ミラクル・リナックス (2059) の情報を追加 影響を受けるシステム:ミラクル・リナックス (2060) の情報を追加 影響を受けるシステム:レッドハット (RHSA-2010:0399) の情報を追加 ベンダ情報:ミラクル・リナックス (tetex-3.0-33.8.5.0.1.AXS3) を追加 ベンダ情報:ミラクル・リナックス (2059) を追加 ベンダ情報:ミラクル・リナックス (2060) を追加 ベンダ情報:レッドハット (RHSA-2010:0399) を追加 ベンダ情報:レッドハット (RHSA-2010:0400) を追加 |
Feb. 17, 2018, 10:37 a.m. |
| Summary | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read. |
|---|---|
| Publication Date | April 24, 2009, 2:30 a.m. |
| Registration Date | Jan. 29, 2021, 1:15 p.m. |
| Last Update | March 7, 2019, 1:30 a.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:* | 3.02 | ||||
| Configuration2 | or higher | or less | more than | less than | |
| cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:* | 0.10.5 | ||||
| Configuration3 | or higher | or less | more than | less than | |
| cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:* | 1.3.9 | ||||
| cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:* | |||||