CVE-2009-0147: apple cups Numeric Errors

CVSS: 4.3v2.0MediumModified

AliasesDEBIAN-CVE-2009-0147

Published 23-04-2009Last modified 07-08-2024

Vulnerability summary

CVE-2009-0147 is a medium (CVSS 4.3) Numeric Errors vulnerability in apple cups. EPSS estimates a 2.58% chance of exploitation in the next 30 days, higher than 84.9% of scored vulnerabilities.

Overall risk

18/100

0100

Low · default modelHow is this calculated?

CVSS score

4.3/10

010

Medium · v2.0 (NVD)

EPSS score

2.58%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 9

DSA-1790-1 DSA-1793-1 RHSA-2009:0429 RHSA-2009:0430 RHSA-2009:0431 RHSA-2009:0458+3 more

Timeline

23-04-2009
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.

CVSS metrics

1 score · 1 source · 1 version

v2.04.3

EPSS trend

Probability

2.58%

Chance of exploitation in the next 30 days

Percentile

85%

Versus all other CVEs

30-day change

0.00 pp

From 2.58% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.58%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-189Numeric ErrorsWeaknesses in this category are related to improper calculation or conversion of numbers.

Affected systems

Debian2 products

poppler< 0.10.6-1
xpdf< 3.02-1.4+lenny1

Apple1 product

cups≤ 1.3.9 | 1.1 | 1.1.1 | 1.1.2 | 1.1.3 | 1.1.4 | 1.1.5 | 1.1.5-1 | 1.1.5-2 | 1.1.6 | 1.1.6-1 | 1.1.6-2 | 1.1.6-3 | 1.1.7 | 1.1.8 | 1.1.9 | 1.1.9-1 | 1.1.10 | 1.1.10-1 | 1.1.11 | 1.1.12 | 1.1.13 | 1.1.14 | 1.1.15 | 1.1.16 | 1.1.17 | 1.1.18 | 1.1.19 | 1.1.19:rc1 | 1.1.19:rc2 | 1.1.19:rc3 | 1.1.19:rc4 | 1.1.19:rc5 | 1.1.20 | 1.1.20:rc1 | 1.1.20:rc2 | 1.1.20:rc3 | 1.1.20:rc4 | 1.1.20:rc5 | 1.1.20:rc6 | 1.1.21 | 1.1.21:rc1 | 1.1.21:rc2 | 1.1.22 | 1.1.22:rc1 | 1.1.22:rc2 | 1.1.23 | 1.1.23:rc1 | 1.2.0 | 1.2.1 | 1.2.2 | 1.2.3 | 1.2.4 | 1.2.5 | 1.2.6 | 1.2.7 | 1.2.8 | 1.2.9 | 1.2.10 | 1.2.11 | 1.2.12 | 1.3.0 | 1.3.1 | 1.3.2 | 1.3.3 | 1.3.4 | 1.3.5 | 1.3.6 | 1.3.7 | 1.3.8 | 1.3.10 | 1.3.11

Foolabs1 product

xpdf0.5a | 0.7a | 0.91a | 0.91b | 0.91c | 0.92a | 0.92b | 0.92c | 0.92d | 0.92e | 0.93a | 0.93b | 0.93c | 1.00a

Glyphandcog1 product

xpdfreader≤ 3.02 | 0.2 | 0.3 | 0.4 | 0.5 | 0.6 | 0.7 | 0.80 | 0.90 | 0.91 | 0.92 | 0.93 | 1.00 | 1.01 | 2.00 | 2.01 | 2.02 | 2.03 | 3.00 | 3.01

4 vendors · 5 products

References

52 links

www.debian.org/security/2009/dsa-1793Vendor AdvisoryX Refsource DEBIAN
security.gentoo.org/glsa/glsa-200904-20.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/34963Third Party AdvisoryX Refsource SECUNIAVendor Advisory
support.apple.com/kb/HT3639X Refsource CONFIRM
www.debian.org/security/2009/dsa-1790Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/35037Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2009/1077VDB EntryX Refsource VUPENVendor Advisory
www.vupen.com/english/advisories/2009/1621VDB EntryX Refsource VUPENVendor Advisory
support.apple.com/kb/HT3549X Refsource CONFIRM
secunia.com/advisories/35064Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Show all 52 references

www.vupen.com/english/advisories/2009/1066VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/34481Third Party AdvisoryX Refsource SECUNIAVendor Advisory
slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477Vendor AdvisoryX Refsource SLACKWARE
www.redhat.com/support/errata/RHSA-2009-0431.htmlVendor AdvisoryX Refsource REDHAT
www.vupen.com/english/advisories/2009/1065VDB EntryX Refsource VUPENVendor Advisory
wiki.rpath.com/Advisories:rPSA-2009-0061X Refsource CONFIRM
bugs.gentoo.org/show_bug.cgi?id=263028X Refsource CONFIRM
secunia.com/advisories/35074Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2009-0430.htmlVendor AdvisoryX Refsource REDHATPatch
www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/35618Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.apple.com/archives/security-announce/2009/Jun/msg00005.htmlVendor AdvisoryX Refsource APPLE
lists.apple.com/archives/security-announce/2009/May/msg00002.htmlVendor AdvisoryX Refsource APPLE
secunia.com/advisories/35065Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2009-0480.htmlVendor AdvisoryX Refsource REDHAT
www.securityfocus.com/bid/34568VDB EntryX Refsource BID
www.securityfocus.com/archive/1/502750/100/0/threadedMailing ListX Refsource BUGTRAQ
www.vupen.com/english/advisories/2010/1040VDB EntryX Refsource VUPENVendor Advisory
lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.htmlVendor AdvisoryX Refsource SUSE
rhn.redhat.com/errata/RHSA-2009-0458.htmlVendor AdvisoryX Refsource REDHAT
www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/34991Third Party AdvisoryX Refsource SECUNIAVendor Advisory
wiki.rpath.com/Advisories:rPSA-2009-0059X Refsource CONFIRM
www.mandriva.com/security/advisories?name=MDVSA-2009:101Vendor AdvisoryX Refsource MANDRIVA
www.mandriva.com/security/advisories?name=MDVSA-2010:087Vendor AdvisoryX Refsource MANDRIVA
lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.htmlVendor AdvisoryX Refsource SUSE
www.us-cert.gov/cas/techalerts/TA09-133A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
secunia.com/advisories/35685Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/34756Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/34291Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/34755Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2009/1297VDB EntryX Refsource VUPENVendor Advisory
www.securityfocus.com/archive/1/502761/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/34852Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.htmlVendor AdvisoryX Refsource SUSE
www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.htmlVendor AdvisoryX Refsource FEDORA
bugzilla.redhat.com/show_bug.cgi?id=490614X Refsource CONFIRM
secunia.com/advisories/34959Third Party AdvisoryX Refsource SECUNIAVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9941VDB EntrySignatureX Refsource OVAL
www.redhat.com/support/errata/RHSA-2009-0429.htmlVendor AdvisoryX Refsource REDHAT
www.securitytracker.com/id?1022073VDB EntryX Refsource SECTRACK
security-tracker.debian.org/tracker/CVE-2009-0147Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities