CVE:CVE-2009-0146
CNNVD:CNNVD-200904-441
Xpdf是便携文档格式(PDF)文件的开放源码查看器。
Xpdf的JBIG2解码器中存在多个缓冲区溢出漏洞。攻击者可以创建恶意的PDF文件，如果打开了该文件就会导致Xpdf崩溃或执行任意代码。
solution:Upgrade foolabs xpdf to a higher version than 0.5a,0.7a,0.91a,0.91b,0.91c,0.92a,0.92b,0.92c,0.92d,0.92e,0.93a,0.93b,0.93c,1.00a,and avoid the version 0.5a,0.7a,0.91a,0.91b,0.91c,0.92a,0.92b,0.92c,0.92d,0.92e,0.93a,0.93b,0.93c,1.00a; Upgrade glyphandcog xpdfreader to a higher version than 3.02,0.2,0.3,0.4,0.5,0.6,0.7,0.80,0.90,0.91,0.92,0.93,1.00,1.01,2.00,2.01,2.02,2.03,3.00,3.01,and avoid the version (,3.02],0.2,0.3,0.4,0.5,0.6,0.7,0.80,0.90,0.91,0.92,0.93,1.00,1.01,2.00,2.01,2.02,2.03,3.00,3.01; Upgrade apple cups to a higher version than 1.3.9,1.1,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.5-1,1.1.5-2,1.1.6,1.1.6-1,1.1.6-2,1.1.6-3,1.1.7,1.1.8,1.1.9,1.1.9-1,1.1.10,1.1.10-1,1.1.11,1.1.12,1.1.13,1.1.14,1.1.15,1.1.16,1.1.17,1.1.18,1.1.19,1.1.19:rc1,1.1.19:rc2,1.1.19:rc3,1.1.19:rc4,1.1.19:rc5,1.1.20,1.1.20:rc1,1.1.20:rc2,1.1.20:rc3,1.1.20:rc4,1.1.20:rc5,1.1.20:rc6,1.1.21,1.1.21:rc1,1.1.21:rc2,1.1.22,1.1.22:rc1,1.1.22:rc2,1.1.23,1.1.23:rc1,1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9,1.2.10,1.2.11,1.2.12,1.3.0,1.3.1,1.3.2,1.3.3,1.3.4,1.3.5,1.3.6,1.3.7,1.3.8,1.3.10,1.3.11,and avoid the version (,1.3.9],1.1,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.5-1,1.1.5-2,1.1.6,1.1.6-1,1.1.6-2,1.1.6-3,1.1.7,1.1.8,1.1.9,1.1.9-1,1.1.10,1.1.10-1,1.1.11,1.1.12,1.1.13,1.1.14,1.1.15,1.1.16,1.1.17,1.1.18,1.1.19,1.1.19:rc1,1.1.19:rc2,1.1.19:rc3,1.1.19:rc4,1.1.19:rc5,1.1.20,1.1.20:rc1,1.1.20:rc2,1.1.20:rc3,1.1.20:rc4,1.1.20:rc5,1.1.20:rc6,1.1.21,1.1.21:rc1,1.1.21:rc2,1.1.22,1.1.22:rc1,1.1.22:rc2,1.1.23,1.1.23:rc1,1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9,1.2.10,1.2.11,1.2.12,1.3.0,1.3.1,1.3.2,1.3.3,1.3.4,1.3.5,1.3.6,1.3.7,1.3.8,1.3.10,1.3.11