{"schemaVersion":3,"id":"CVE-2009-3608","aliases":["UBUNTU-CVE-2009-3608","DEBIAN-CVE-2009-3608"],"status":"published","duplicateOf":null,"title":null,"description":"Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.","dates":{"published":"2009-10-21T17:00:00.000Z","modified":"2024-08-07T06:31:10.520Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.3,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9.3,"severity":"high","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.10228,"percentile":0.95641,"severity":"medium","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.10228},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.10228,"percentile":0.95641}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.10228,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.10228,"percentile":0.95641}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_1BE7A4FC2C923CD8","name":"Exploit Reference (securityfocus.com)","source":"reference","url":"http://www.securityfocus.com/bid/36703","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-189","name":"Numeric Errors","description":"Weaknesses in this category are related to improper calculation or conversion of numbers.","type":"category","status":"Draft","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/189.html"}],"affected":[{"vendor":"debian","product":"poppler","name":"poppler","label":"poppler","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/poppler","purlType":"deb","versions":[{"text":"< 0.12.2-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.12.2-1","eol":null,"hubHref":null},{"vendor":"debian","product":"xpdf","name":"xpdf","label":"xpdf","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/xpdf","purlType":"deb","versions":[{"text":"< 3.02-2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.02-2","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"ipe","name":"ipe","label":"ipe","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/ipe","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"foolabs","product":"xpdf","name":"xpdf","label":"xpdf","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.02pl1","noFixRecorded":false,"fixedIn":null},{"text":"3.02pl2","noFixRecorded":false,"fixedIn":null},{"text":"3.02pl3","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.02pl1 | 3.02pl2 | 3.02pl3","eol":null,"hubHref":"/vendor/foolabs/xpdf"},{"vendor":"glyphandcog","product":"xpdfreader","name":"xpdfreader","label":"xpdfreader","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.00","noFixRecorded":false,"fixedIn":null},{"text":"3.01","noFixRecorded":false,"fixedIn":null},{"text":"3.02","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.00 | 3.01 | 3.02","eol":null,"hubHref":"/vendor/glyphandcog/xpdfreader"},{"vendor":"poppler","product":"poppler","name":"poppler","label":"poppler","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 0.12.0","noFixRecorded":false,"fixedIn":null},{"text":"0.1","noFixRecorded":false,"fixedIn":null},{"text":"0.1.1","noFixRecorded":false,"fixedIn":null},{"text":"0.1.2","noFixRecorded":false,"fixedIn":null},{"text":"0.2.0","noFixRecorded":false,"fixedIn":null},{"text":"0.3.0","noFixRecorded":false,"fixedIn":null},{"text":"0.3.1","noFixRecorded":false,"fixedIn":null},{"text":"0.3.2","noFixRecorded":false,"fixedIn":null},{"text":"0.3.3","noFixRecorded":false,"fixedIn":null},{"text":"0.4.0","noFixRecorded":false,"fixedIn":null},{"text":"0.4.1","noFixRecorded":false,"fixedIn":null},{"text":"0.4.2","noFixRecorded":false,"fixedIn":null},{"text":"0.4.3","noFixRecorded":false,"fixedIn":null},{"text":"0.4.4","noFixRecorded":false,"fixedIn":null},{"text":"0.5.0","noFixRecorded":false,"fixedIn":null},{"text":"0.5.1","noFixRecorded":false,"fixedIn":null},{"text":"0.5.2","noFixRecorded":false,"fixedIn":null},{"text":"0.5.3","noFixRecorded":false,"fixedIn":null},{"text":"0.5.4","noFixRecorded":false,"fixedIn":null},{"text":"0.5.9","noFixRecorded":false,"fixedIn":null},{"text":"0.6.0","noFixRecorded":false,"fixedIn":null},{"text":"0.6.1","noFixRecorded":false,"fixedIn":null},{"text":"0.6.2","noFixRecorded":false,"fixedIn":null},{"text":"0.6.3","noFixRecorded":false,"fixedIn":null},{"text":"0.6.4","noFixRecorded":false,"fixedIn":null},{"text":"0.7.0","noFixRecorded":false,"fixedIn":null},{"text":"0.7.1","noFixRecorded":false,"fixedIn":null},{"text":"0.7.2","noFixRecorded":false,"fixedIn":null},{"text":"0.7.3","noFixRecorded":false,"fixedIn":null},{"text":"0.8.0","noFixRecorded":false,"fixedIn":null},{"text":"0.8.1","noFixRecorded":false,"fixedIn":null},{"text":"0.8.2","noFixRecorded":false,"fixedIn":null},{"text":"0.8.3","noFixRecorded":false,"fixedIn":null},{"text":"0.8.4","noFixRecorded":false,"fixedIn":null},{"text":"0.8.6","noFixRecorded":false,"fixedIn":null},{"text":"0.8.7","noFixRecorded":false,"fixedIn":null},{"text":"0.9.0","noFixRecorded":false,"fixedIn":null},{"text":"0.9.1","noFixRecorded":false,"fixedIn":null},{"text":"0.9.2","noFixRecorded":false,"fixedIn":null},{"text":"0.9.3","noFixRecorded":false,"fixedIn":null},{"text":"0.10.0","noFixRecorded":false,"fixedIn":null},{"text":"0.10.1","noFixRecorded":false,"fixedIn":null},{"text":"0.10.2","noFixRecorded":false,"fixedIn":null},{"text":"0.10.3","noFixRecorded":false,"fixedIn":null},{"text":"0.10.4","noFixRecorded":false,"fixedIn":null},{"text":"0.10.5","noFixRecorded":false,"fixedIn":null},{"text":"0.10.6","noFixRecorded":false,"fixedIn":null},{"text":"0.10.7","noFixRecorded":false,"fixedIn":null},{"text":"0.11.0","noFixRecorded":false,"fixedIn":null},{"text":"0.11.1","noFixRecorded":false,"fixedIn":null},{"text":"0.11.2","noFixRecorded":false,"fixedIn":null},{"text":"0.11.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 0.12.0 | 0.1 | 0.1.1 | 0.1.2 | 0.2.0 | 0.3.0 | 0.3.1 | 0.3.2 | 0.3.3 | 0.4.0 | 0.4.1 | 0.4.2 | 0.4.3 | 0.4.4 | 0.5.0 | 0.5.1 | 0.5.2 | 0.5.3 | 0.5.4 | 0.5.9 | 0.6.0 | 0.6.1 | 0.6.2 | 0.6.3 | 0.6.4 | 0.7.0 | 0.7.1 | 0.7.2 | 0.7.3 | 0.8.0 | 0.8.1 | 0.8.2 | 0.8.3 | 0.8.4 | 0.8.6 | 0.8.7 | 0.9.0 | 0.9.1 | 0.9.2 | 0.9.3 | 0.10.0 | 0.10.1 | 0.10.2 | 0.10.3 | 0.10.4 | 0.10.5 | 0.10.6 | 0.10.7 | 0.11.0 | 0.11.1 | 0.11.2 | 0.11.3","eol":null,"hubHref":"/vendor/poppler/poppler"}],"affectedCount":6,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://secunia.com/advisories/39938","label":"secunia.com/advisories/39938","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1504.html","label":"rhn.redhat.com/errata/RHSA-2009-1504.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.debian.org/security/2009/dsa-1941","label":"www.debian.org/security/2009/dsa-1941","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:287","label":"www.mandriva.com/security/advisories?name=MDVSA-2009:287","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526637","label":"bugzilla.redhat.com/show_bug.cgi?id=526637","hostname":"bugzilla.redhat.com","tags":["X Refsource CONFIRM","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/6","label":"www.openwall.com/lists/oss-security/2009/12/01/6","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST"]},{"url":"http://secunia.com/advisories/37028","label":"secunia.com/advisories/37028","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html","label":"lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html","label":"www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://poppler.freedesktop.org/","label":"poppler.freedesktop.org","hostname":"poppler.freedesktop.org","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1501.html","label":"rhn.redhat.com/errata/RHSA-2009-1501.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/37079","label":"secunia.com/advisories/37079","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","label":"lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://www.debian.org/security/2010/dsa-2028","label":"www.debian.org/security/2010/dsa-2028","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://www.debian.org/security/2010/dsa-2050","label":"www.debian.org/security/2010/dsa-2050","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/1","label":"www.openwall.com/lists/oss-security/2009/12/01/1","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST"]},{"url":"http://secunia.com/advisories/37159","label":"secunia.com/advisories/37159","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/37054","label":"secunia.com/advisories/37054","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html","label":"lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html","label":"www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1512.html","label":"rhn.redhat.com/errata/RHSA-2009-1512.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/37114","label":"secunia.com/advisories/37114","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/37077","label":"secunia.com/advisories/37077","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023029","label":"securitytracker.com/id?1023029","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Patch"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1503.html","label":"rhn.redhat.com/errata/RHSA-2009-1503.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.vupen.com/english/advisories/2009/2926","label":"www.vupen.com/english/advisories/2009/2926","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","label":"www.mandriva.com/security/advisories?name=MDVSA-2011:175","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://secunia.com/advisories/37037","label":"secunia.com/advisories/37037","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-850-3","label":"www.ubuntu.com/usn/USN-850-3","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://www.vupen.com/english/advisories/2010/0802","label":"www.vupen.com/english/advisories/2010/0802","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1502.html","label":"rhn.redhat.com/errata/RHSA-2009-1502.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html","label":"lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53794","label":"exchange.xforce.ibmcloud.com/vulnerabilities/53794","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www.vupen.com/english/advisories/2009/2928","label":"www.vupen.com/english/advisories/2009/2928","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1513.html","label":"rhn.redhat.com/errata/RHSA-2009-1513.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/37034","label":"secunia.com/advisories/37034","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/5","label":"www.openwall.com/lists/oss-security/2009/12/01/5","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST"]},{"url":"http://www.vupen.com/english/advisories/2009/2924","label":"www.vupen.com/english/advisories/2009/2924","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37051","label":"secunia.com/advisories/37051","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT"]},{"url":"http://www.vupen.com/english/advisories/2010/1220","label":"www.vupen.com/english/advisories/2010/1220","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.ubuntu.com/usn/USN-850-1","label":"www.ubuntu.com/usn/USN-850-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://secunia.com/advisories/37053","label":"secunia.com/advisories/37053","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37061","label":"secunia.com/advisories/37061","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/39327","label":"secunia.com/advisories/39327","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/37043","label":"secunia.com/advisories/37043","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2009-016.html","label":"www.ocert.org/advisories/ocert-2009-016.html","hostname":"www.ocert.org","tags":["X Refsource MISC"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9536","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9536","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://www.securityfocus.com/bid/36703","label":"www.securityfocus.com/bid/36703","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2925","label":"www.vupen.com/english/advisories/2009/2925","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:334","label":"www.mandriva.com/security/advisories?name=MDVSA-2009:334","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"https://ubuntu.com/security/CVE-2009-3608","label":"ubuntu.com/security/CVE-2009-3608","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-850-1","label":"ubuntu.com/security/notices/USN-850-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-850-3","label":"ubuntu.com/security/notices/USN-850-3","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-973-1","label":"ubuntu.com/security/notices/USN-973-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3608","label":"www.cve.org/CVERecord?id=CVE-2009-3608","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2009-3608","label":"security-tracker.debian.org/tracker/CVE-2009-3608","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-1941-1","DSA-2028-1","DSA-2050-1","OPENSUSE-SU-2024:10360-1","RHSA-2009:1501","RHSA-2009:1502","RHSA-2009:1503","RHSA-2009:1504","RHSA-2009:1512","RHSA-2009:1513","RHSA-2010:0400"],"duplicates":["CVE-2009-3908"],"related":["OPENSUSE-SU-2024:10360-1"]},"timeline":[{"kind":"published","date":"2009-10-21T17:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T06:31:10.520Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T06:16:09.834Z","stale":false,"partial":false}}