Vulnerability Intelligence Report
CVE-2009-4035
The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a crafted Type 1 font that can produce a negative value, leading to a signed-to-unsigned integer conversion error and a buffer overflow.
No Active Exploit Signals
CVSS Base Score
9.3
HIGH
EPSS Probability:3.79%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| gnome | gpdf | 2.8.2 |
| kde | kdegraphics | 3.3.1 |
| kde | kpdf | 3.3.1 |
| xpdf | xpdf | 3.0.0 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
3.785%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Red Hat, Inc. · Vendor · USA |
| Reserved | 2009-11-20T00:00:00 |
| Published | 2009-12-21T21:00:00 |
| Patch Date | 2009-12-16 |
| Last Updated | 2024-08-07T06:45:50 |
Community Chatter & Buzz