CVE:CVE-2009-0165
CNNVD:CNNVD-200904-444
Xpdf是便携文档格式(PDF)文件的开放源码查看器。
Xpdf的JBIG2解码器中存在整数溢出漏洞。攻击者可以创建恶意的PDF文件，如果打开了该文件就会导致Xpdf崩溃或执行任意代码。
solution:Upgrade foolabs xpdf to a higher version than 0.5a,0.7a,0.91a,0.91b,0.91c,0.92a,0.92b,0.92c,0.92d,0.92e,0.93a,0.93b,0.93c,1.00a,3.0.1,and avoid the version 0.5a,0.7a,0.91a,0.91b,0.91c,0.92a,0.92b,0.92c,0.92d,0.92e,0.93a,0.93b,0.93c,1.00a,3.0.1; Upgrade glyphandcog xpdfreader to a higher version than 3.02,0.2,0.3,0.4,0.5,0.6,0.7,0.80,0.90,0.91,0.92,0.93,1.00,1.01,2.00,2.01,2.02,2.03,3.00,3.01,and avoid the version (,3.02],0.2,0.3,0.4,0.5,0.6,0.7,0.80,0.90,0.91,0.92,0.93,1.00,1.01,2.00,2.01,2.02,2.03,3.00,3.01