CVE-2009-0755: Medium severity Poppler Poppler vulnerability
Published Mar 3, 2009
·Updated
The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF file with an invalid Form Opt entry.
Affected Software
34 affected components
Poppler Poppler=0.7.3
Poppler Poppler=0.3.2
Poppler Poppler=0.4.0
Poppler Poppler=0.10.1
Poppler Poppler=0.7.1
Poppler Poppler=0.6.1
Poppler Poppler=0.3.1
Poppler Poppler=0.5.2
Poppler Poppler=0.5.91
Poppler Poppler=0.6.0
Poppler Poppler=0.3.3
Poppler Poppler=0.4.2
Poppler Poppler=0.6.4
Poppler Poppler=0.1.2
Poppler Poppler=0.7.0
Poppler Poppler=0.7.2
Poppler Poppler=0.5.0
Poppler Poppler=0.5.9
Poppler Poppler=0.5.90
Poppler Poppler=0.6.3
Poppler Poppler=0.2.0
Poppler Poppler=0.8.4
Poppler Poppler=0.5.4
Poppler Poppler=0.1.1
Poppler Poppler=0.4.1
Poppler Poppler=0.5.3
Poppler Poppler=0.4.4
Poppler Poppler=0.3.0
Poppler Poppler=0.1
Poppler Poppler=0.6.2
Poppler Poppler=0.10.2
Poppler Poppler=0.4.3
Poppler Poppler<=0.10.3
Poppler Poppler=0.5.1
Event History
Mar 3, 2009
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:30 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0755?
The severity of CVE-2009-0755 is classified as a denial of service vulnerability.
2
How does CVE-2009-0755 affect Poppler?
CVE-2009-0755 allows remote attackers to crash the Poppler application by sending a specially crafted PDF file.
3
How can I fix CVE-2009-0755?
To fix CVE-2009-0755, upgrade Poppler to version 0.10.4 or later.
4
Which versions of Poppler are affected by CVE-2009-0755?
Poppler versions prior to 0.10.4, including 0.3.1 to 0.10.3, are affected by CVE-2009-0755.
5
Is there a known workaround for CVE-2009-0755?
There are no specific workarounds for CVE-2009-0755; upgrading to a secure version is recommended.