Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2009-3938

Publication date 13 November 2009

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc in Poppler (aka libpoppler) 0.10.6, 0.12.0, and possibly other versions, as used by the Abiword pdftoabw utility, allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PDF file.

Read the notes from the security team

Status

Package Ubuntu Release Status
poppler 11.10 oneiric
Not affected
11.04 natty
Not affected
10.10 maverick Ignored
10.04 LTS lucid Ignored
9.10 karmic Ignored
9.04 jaunty Ignored
8.10 intrepid Ignored
8.04 LTS hardy Ignored
6.06 LTS dapper
Not affected

Notes

mdeslaur

as of 2010-01-18, upstream hasn't committed a fix yet debian released patch from bug, but it's not final intrepid+ compiler hardening reduces this to a denial of service. Can't reproduce issue on Hardy. Setting to "low". seems we don't carry the patch that Debian is carrying for this.

jdstrand

pdftoabw was removed in 0.18