| Title | JBIG2 デコーダにおける任意のコードを実行される脆弱性 |
|---|---|
| Summary | Xpdf、CUPS、Poppler などの製品の JBIG2 デコーダには、PDF ファイルの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 |
| Possible impacts | 第三者に任意のコードを実行される可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | April 16, 2009, midnight |
| Registration Date | May 28, 2009, 11:53 a.m. |
| Last Update | May 26, 2010, 4:29 p.m. |
| CVSS2.0 : 警告 | |
| Score | 6.8 |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| レッドハット |
| Red Hat Enterprise Linux 3 (as) |
| Red Hat Enterprise Linux 3 (es) |
| Red Hat Enterprise Linux 3 (ws) |
| Red Hat Enterprise Linux 4 (as) |
| Red Hat Enterprise Linux 4 (es) |
| Red Hat Enterprise Linux 4 (ws) |
| Red Hat Enterprise Linux 4.7 (as) |
| Red Hat Enterprise Linux 4.7 (es) |
| Red Hat Enterprise Linux 4.8 (as) |
| Red Hat Enterprise Linux 4.8 (es) |
| Red Hat Enterprise Linux 5 (server) |
| Red Hat Enterprise Linux Desktop 3.0 |
| Red Hat Enterprise Linux Desktop 4.0 |
| Red Hat Enterprise Linux Desktop 5.0 (client) |
| Red Hat Enterprise Linux EUS 5.3.z (server) |
| RHEL Desktop Workstation 5 (client) |
| RHEL Optional Productivity Applications 5 (server) |
| RHEL Optional Productivity Applications EUS 5.3.z (server) |
| サイバートラスト株式会社 |
| Asianux Server 3 (x86) |
| Asianux Server 3 (x86-64) |
| Asianux Server 4.0 |
| Asianux Server 4.0 (x86-64) |
| 日本電気 |
| InfoFrame DocumentSkipper |
| InfoFrame ImagingCore |
| Glyph & Cog, LLC |
| Xpdf 3.02pl2 およびそれ以前 |
| CUPS |
| CUPS 1.3.9 およびそれ以前 |
| freedesktop.org |
| Poppler 0.10.6 未満 |
| No | Changed Details | Date of change |
|---|---|---|
| 0 | [2009年05月28日] 掲載 [2009年07月03日] ベンダ情報:ミラクル・リナックス (poppler-0.5.4-4.4.9.1AXS3) を追加 [2009年12月07日] ベンダ情報:ミラクル・リナックス (kdegraphics-3.5.5-3.5AXS3) を追加 [2010年05月06日] 影響を受けるシステム:日本電気 (NV10-003) の情報を追加 ベンダ情報:日本電気 (NV10-003) を追加 [2010年05月26日] 影響を受けるシステム:ミラクル・リナックス (2059) の情報を追加 影響を受けるシステム:レッドハット (RHSA-2010:0399) の情報を追加 ベンダ情報:ミラクル・リナックス (tetex-3.0-33.8.5.0.1.AXS3) を追加 ベンダ情報:ミラクル・リナックス (2059) を追加 ベンダ情報:レッドハット (RHSA-2010:0399) を追加 ベンダ情報:レッドハット (RHSA-2010:0400) を追加 |
Feb. 17, 2018, 10:37 a.m. |
| Summary | Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file. |
|---|---|
| Publication Date | April 24, 2009, 2:30 a.m. |
| Registration Date | Jan. 29, 2021, 1:15 p.m. |
| Last Update | Feb. 13, 2023, 11:19 a.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:* | 3.02 | ||||
| Configuration2 | or higher | or less | more than | less than | |
| cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:* | 0.10.5 | ||||
| cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:* | |||||
| Configuration3 | or higher | or less | more than | less than | |
| cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:* | 1.3.9 | ||||
| cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:* | |||||