CVE		CVE-2009-0195
Status		UNKNOWN
Description		Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.
Severity		Medium
CVSS score		6,8
CVSS vector		(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Phase		ASSIGNED (21.08.2010)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-0195
References		BID : 34791
		BUGTRAQ : 20090417 Secunia Research: CUPS pdftops JBIG2 Symbol Dictionary Buffer Overflow
		BUGTRAQ : 20090417 Secunia Research: Xpdf JBIG2 Symbol Dictionary Buffer Overflow Vulnerability
		MANDRIVA : MDVSA-2010:087
		MISC : http://secunia.com/secunia_research/2009-17/
		MISC : http://secunia.com/secunia_research/2009-18/
		OVAL : oval:org.mitre.oval:def:10076
		REDHAT : RHSA-2009:0458
		REDHAT : RHSA-2009:0480
		SECUNIA : 34291
		SECUNIA : 34481
		SECUNIA : 34756
		SECUNIA : 34963
		SECUNIA : 35064
		VUPEN : ADV-2010-1040