~ubuntu-security/ubuntu-cve-tracker/master

PublicDateAtUSN: 2009-04-23
Candidate:CVE-2009-1180
PublicDate: 2009-04-23
References: 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1180
 http://www.ubuntu.com/usn/usn-759-1
 http://www.ubuntu.com/usn/usn-973-1
Description:
 The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier,
 Poppler before 0.10.6, and other products allows remote attackers to
 execute arbitrary code via a crafted PDF file that triggers a free of
 invalid data.
Ubuntu-Description:
Notes: 
 jdstrand> CUPS on Ubuntu uses system pdftops (compiled with --disable-pdftops)
Bugs: 
Priority: medium
Discovered-by: 
Assigned-to: mdeslaur

Patches_xpdf:
upstream_xpdf: released (3.02-2)
dapper_xpdf: ignored (reached end-of-life)
gutsy_xpdf: needs-triage (reached end-of-life)
hardy_xpdf: ignored (reached end-of-life)
intrepid_xpdf: needs-triage (reached end-of-life)
jaunty_xpdf: released (3.02-1.4ubuntu2.9.04.1)
karmic_xpdf: released (3.02-1.4ubuntu2.9.10.1)
lucid_xpdf: not-affected (3.02-2)
maverick_xpdf: not-affected (3.02-2)
natty_xpdf: not-affected (3.02-2)
oneiric_xpdf: not-affected (3.02-2)
precise_xpdf: not-affected (3.02-2)
precise/esm_xpdf: DNE (precise was not-affected [3.02-2])
quantal_xpdf: not-affected (3.02-2)
raring_xpdf: not-affected (3.02-2)
saucy_xpdf: not-affected (3.02-2)
trusty_xpdf: not-affected (3.02-2)
utopic_xpdf: not-affected (3.02-2)
vivid_xpdf: not-affected (3.02-2)
vivid/stable-phone-overlay_xpdf: DNE
vivid/ubuntu-core_xpdf: DNE
wily_xpdf: not-affected (3.02-2)
xenial_xpdf: not-affected (3.02-2)
yakkety_xpdf: not-affected (3.02-2)
zesty_xpdf: not-affected (3.02-2)
devel_xpdf: not-affected (3.02-2)

Patches_koffice:
Priority_koffice: low
upstream_koffice: needs-triage
dapper_koffice: ignored (reached end-of-life)
gutsy_koffice: needs-triage (reached end-of-life)
hardy_koffice: ignored (reached end-of-life)
intrepid_koffice: needed (reached end-of-life)
jaunty_koffice: released (1:1.6.3-7ubuntu6.1)
karmic_koffice: not-affected (linked to poppler)
lucid_koffice: not-affected (code not present)
maverick_koffice: not-affected (code not present)
natty_koffice: not-affected (code not present)
oneiric_koffice: not-affected (code not present)
precise_koffice: DNE
precise/esm_koffice: DNE
quantal_koffice: DNE
raring_koffice: DNE
saucy_koffice: DNE
trusty_koffice: DNE
utopic_koffice: DNE
vivid_koffice: DNE
vivid/stable-phone-overlay_koffice: DNE
vivid/ubuntu-core_koffice: DNE
wily_koffice: DNE
xenial_koffice: DNE
yakkety_koffice: DNE
zesty_koffice: DNE
devel_koffice: DNE

Patches_evince:
upstream_evince: not-affected (linked to poppler)
dapper_evince: not-affected (linked to poppler)
gutsy_evince: not-affected (linked to poppler)
hardy_evince: not-affected (linked to poppler)
intrepid_evince: not-affected (linked to poppler)
jaunty_evince: not-affected (linked to poppler)
karmic_evince: not-affected (linked to poppler)
lucid_evince: not-affected (linked to poppler)
maverick_evince: not-affected (linked to poppler)
natty_evince: not-affected (linked to poppler)
oneiric_evince: not-affected (linked to poppler)
precise_evince: not-affected (linked to poppler)
precise/esm_evince: DNE (precise was not-affected [linked to poppler])
quantal_evince: not-affected (linked to poppler)
raring_evince: not-affected (linked to poppler)
saucy_evince: not-affected (linked to poppler)
trusty_evince: not-affected (linked to poppler)
utopic_evince: not-affected (linked to poppler)
vivid_evince: not-affected (linked to poppler)
vivid/stable-phone-overlay_evince: DNE
vivid/ubuntu-core_evince: DNE
wily_evince: not-affected (linked to poppler)
xenial_evince: not-affected (linked to poppler)
yakkety_evince: not-affected (linked to poppler)
zesty_evince: not-affected (linked to poppler)
devel_evince: not-affected (linked to poppler)

Patches_poppler:
upstream_poppler: needs-triage
dapper_poppler: released (0.5.1-0ubuntu7.5)
gutsy_poppler: needs-triage (reached end-of-life)
hardy_poppler: released (0.6.4-1ubuntu3.2)
intrepid_poppler: released (0.8.7-1ubuntu0.2)
jaunty_poppler: released (0.10.5-1ubuntu2)
karmic_poppler: released (0.10.5-1ubuntu2)
lucid_poppler: released (0.10.5-1ubuntu2)
maverick_poppler: released (0.10.5-1ubuntu2)
natty_poppler: released (0.10.5-1ubuntu2)
oneiric_poppler: released (0.10.5-1ubuntu2)
precise_poppler: released (0.10.5-1ubuntu2)
precise/esm_poppler: DNE (precise was released [0.10.5-1ubuntu2])
quantal_poppler: released (0.10.5-1ubuntu2)
raring_poppler: released (0.10.5-1ubuntu2)
saucy_poppler: released (0.10.5-1ubuntu2)
trusty_poppler: released (0.10.5-1ubuntu2)
utopic_poppler: released (0.10.5-1ubuntu2)
vivid_poppler: released (0.10.5-1ubuntu2)
vivid/stable-phone-overlay_poppler: released (0.10.5-1ubuntu2)
vivid/ubuntu-core_poppler: DNE
wily_poppler: released (0.10.5-1ubuntu2)
xenial_poppler: released (0.10.5-1ubuntu2)
yakkety_poppler: released (0.10.5-1ubuntu2)
zesty_poppler: released (0.10.5-1ubuntu2)
devel_poppler: released (0.10.5-1ubuntu2)

Patches_tetex-bin:
upstream_tetex-bin: needs-triage
dapper_tetex-bin: not-affected (linked to poppler)
gutsy_tetex-bin: DNE
hardy_tetex-bin: DNE
intrepid_tetex-bin: DNE
jaunty_tetex-bin: DNE
karmic_tetex-bin: DNE
lucid_tetex-bin: DNE
maverick_tetex-bin: DNE
natty_tetex-bin: DNE
oneiric_tetex-bin: DNE
precise_tetex-bin: DNE
precise/esm_tetex-bin: DNE
quantal_tetex-bin: DNE
raring_tetex-bin: DNE
saucy_tetex-bin: DNE
trusty_tetex-bin: DNE
utopic_tetex-bin: DNE
vivid_tetex-bin: DNE
vivid/stable-phone-overlay_tetex-bin: DNE
vivid/ubuntu-core_tetex-bin: DNE
wily_tetex-bin: DNE
xenial_tetex-bin: DNE
yakkety_tetex-bin: DNE
zesty_tetex-bin: DNE
devel_tetex-bin: DNE

Patches_texlive-bin:
upstream_texlive-bin: needs-triage
dapper_texlive-bin: DNE
gutsy_texlive-bin: not-affected (linked to poppler)
hardy_texlive-bin: not-affected (linked to poppler)
intrepid_texlive-bin: not-affected (linked to poppler)
jaunty_texlive-bin: not-affected (linked to poppler)
karmic_texlive-bin: not-affected (linked to poppler)
lucid_texlive-bin: not-affected (linked to poppler)
maverick_texlive-bin: not-affected (linked to poppler)
natty_texlive-bin: not-affected (linked to poppler)
oneiric_texlive-bin: not-affected (linked to poppler)
precise_texlive-bin: not-affected (linked to poppler)
precise/esm_texlive-bin: DNE (precise was not-affected [linked to poppler])
quantal_texlive-bin: not-affected (linked to poppler)
raring_texlive-bin: not-affected (linked to poppler)
saucy_texlive-bin: not-affected (linked to poppler)
trusty_texlive-bin: not-affected (linked to poppler)
utopic_texlive-bin: not-affected (linked to poppler)
vivid_texlive-bin: not-affected (linked to poppler)
vivid/stable-phone-overlay_texlive-bin: DNE
vivid/ubuntu-core_texlive-bin: DNE
wily_texlive-bin: not-affected (linked to poppler)
xenial_texlive-bin: not-affected (linked to poppler)
yakkety_texlive-bin: not-affected (linked to poppler)
zesty_texlive-bin: not-affected (linked to poppler)
devel_texlive-bin: not-affected (linked to poppler)

Patches_kdegraphics:
upstream_kdegraphics: needs-triage
dapper_kdegraphics: not-affected (linked to poppler)
gutsy_kdegraphics: not-affected (linked to poppler)
hardy_kdegraphics: not-affected (linked to poppler)
intrepid_kdegraphics: not-affected (linked to poppler)
jaunty_kdegraphics: not-affected (linked to poppler)
karmic_kdegraphics: not-affected (linked to poppler)
lucid_kdegraphics: not-affected (linked to poppler)
maverick_kdegraphics: not-affected (linked to poppler)
natty_kdegraphics: not-affected (linked to poppler)
oneiric_kdegraphics: DNE
precise_kdegraphics: DNE
precise/esm_kdegraphics: DNE
quantal_kdegraphics: DNE
raring_kdegraphics: DNE
saucy_kdegraphics: DNE
trusty_kdegraphics: DNE
utopic_kdegraphics: DNE
vivid_kdegraphics: DNE
vivid/stable-phone-overlay_kdegraphics: DNE
vivid/ubuntu-core_kdegraphics: DNE
wily_kdegraphics: DNE
xenial_kdegraphics: DNE
yakkety_kdegraphics: DNE
zesty_kdegraphics: DNE
devel_kdegraphics: DNE

Patches_gpdf:
upstream_gpdf: needs-triage
dapper_gpdf: ignored (reached end-of-life)
gutsy_gpdf: DNE
hardy_gpdf: DNE
intrepid_gpdf: DNE
jaunty_gpdf: DNE
karmic_gpdf: DNE
lucid_gpdf: DNE
maverick_gpdf: DNE
natty_gpdf: DNE
oneiric_gpdf: DNE
precise_gpdf: DNE
precise/esm_gpdf: DNE
quantal_gpdf: DNE
raring_gpdf: DNE
saucy_gpdf: DNE
trusty_gpdf: DNE
utopic_gpdf: DNE
vivid_gpdf: DNE
vivid/stable-phone-overlay_gpdf: DNE
vivid/ubuntu-core_gpdf: DNE
wily_gpdf: DNE
xenial_gpdf: DNE
yakkety_gpdf: DNE
zesty_gpdf: DNE
devel_gpdf: DNE

Patches_pdftohtml:
upstream_pdftohtml: 
dapper_pdftohtml: ignored (reached end-of-life)
gutsy_pdftohtml: DNE
hardy_pdftohtml: DNE
intrepid_pdftohtml: DNE
jaunty_pdftohtml: DNE
karmic_pdftohtml: DNE
lucid_pdftohtml: DNE
maverick_pdftohtml: DNE
natty_pdftohtml: DNE
oneiric_pdftohtml: DNE
precise_pdftohtml: DNE
precise/esm_pdftohtml: DNE
quantal_pdftohtml: DNE
raring_pdftohtml: DNE
saucy_pdftohtml: DNE
trusty_pdftohtml: DNE
utopic_pdftohtml: DNE
vivid_pdftohtml: DNE
vivid/stable-phone-overlay_pdftohtml: DNE
vivid/ubuntu-core_pdftohtml: DNE
wily_pdftohtml: DNE
xenial_pdftohtml: DNE
yakkety_pdftohtml: DNE
zesty_pdftohtml: DNE
devel_pdftohtml: DNE

Patches_libextractor:
upstream_libextractor: 
dapper_libextractor: ignored (reached end-of-life)
gutsy_libextractor: needs-triage (reached end-of-life)
hardy_libextractor: ignored (reached end-of-life)
intrepid_libextractor: needs-triage (reached end-of-life)
jaunty_libextractor: ignored (reached end-of-life)
karmic_libextractor: ignored (reached end-of-life)
lucid_libextractor: ignored (reached end-of-life)
maverick_libextractor: ignored (reached end-of-life)
natty_libextractor: ignored (reached end-of-life)
oneiric_libextractor: ignored (reached end-of-life)
precise_libextractor: ignored (reached end-of-life)
precise/esm_libextractor: DNE (precise was needs-triage)
quantal_libextractor: ignored (reached end-of-life)
raring_libextractor: ignored (reached end-of-life)
saucy_libextractor: ignored (reached end-of-life)
trusty_libextractor: needs-triage
utopic_libextractor: ignored (reached end-of-life)
vivid_libextractor: ignored (reached end-of-life)
vivid/stable-phone-overlay_libextractor: DNE
vivid/ubuntu-core_libextractor: DNE
wily_libextractor: ignored (reached end-of-life)
xenial_libextractor: needs-triage
yakkety_libextractor: ignored (reached end-of-life)
zesty_libextractor: needs-triage
devel_libextractor: needs-triage

Patches_pdfkit.framework:
upstream_pdfkit.framework: 
dapper_pdfkit.framework: ignored (reached end-of-life)
gutsy_pdfkit.framework: DNE
hardy_pdfkit.framework: DNE
intrepid_pdfkit.framework: DNE
jaunty_pdfkit.framework: DNE
karmic_pdfkit.framework: DNE
lucid_pdfkit.framework: DNE
maverick_pdfkit.framework: DNE
natty_pdfkit.framework: DNE
oneiric_pdfkit.framework: DNE
precise_pdfkit.framework: DNE
precise/esm_pdfkit.framework: DNE
quantal_pdfkit.framework: DNE
raring_pdfkit.framework: DNE
saucy_pdfkit.framework: DNE
trusty_pdfkit.framework: DNE
utopic_pdfkit.framework: DNE
vivid_pdfkit.framework: DNE
vivid/stable-phone-overlay_pdfkit.framework: DNE
vivid/ubuntu-core_pdfkit.framework: DNE
wily_pdfkit.framework: DNE
xenial_pdfkit.framework: DNE
yakkety_pdfkit.framework: DNE
zesty_pdfkit.framework: DNE
devel_pdfkit.framework: DNE

Patches_ipe:
upstream_ipe: needs-triage
dapper_ipe: ignored (reached end-of-life)
gutsy_ipe: needs-triage (reached end-of-life)
hardy_ipe: not-affected (uses system pdflatex)
intrepid_ipe: needs-triage (reached end-of-life)
jaunty_ipe: ignored (reached end-of-life)
karmic_ipe: ignored (reached end-of-life)
lucid_ipe: not-affected (uses system pdflatex)
maverick_ipe: not-affected (uses system pdflatex)
natty_ipe: not-affected (uses system pdflatex)
oneiric_ipe: not-affected (uses system pdflatex)
precise_ipe: not-affected (uses system pdflatex)
precise/esm_ipe: DNE (precise was not-affected [uses system pdflatex])
quantal_ipe: not-affected (uses system pdflatex)
raring_ipe: not-affected (uses system pdflatex)
saucy_ipe: not-affected (uses system pdflatex)
trusty_ipe: not-affected (uses system pdflatex)
utopic_ipe: not-affected (uses system pdflatex)
vivid_ipe: not-affected (uses system pdflatex)
vivid/stable-phone-overlay_ipe: DNE
vivid/ubuntu-core_ipe: DNE
wily_ipe: not-affected (uses system pdflatex)
xenial_ipe: not-affected (uses system pdflatex)
yakkety_ipe: not-affected (uses system pdflatex)
zesty_ipe: not-affected (uses system pdflatex)
devel_ipe: not-affected (uses system pdflatex)

Patches_cups:
Priority_cups: negligible
upstream_cups: released (1.3.10)
dapper_cups: DNE
gutsy_cups: DNE
hardy_cups: DNE
intrepid_cups: not-affected
jaunty_cups: not-affected
karmic_cups: not-affected
lucid_cups: not-affected
maverick_cups: not-affected
natty_cups: not-affected
oneiric_cups: not-affected
precise_cups: not-affected
precise/esm_cups: DNE (precise was not-affected)
quantal_cups: not-affected
raring_cups: not-affected
saucy_cups: not-affected
trusty_cups: not-affected
utopic_cups: not-affected
vivid_cups: not-affected
vivid/stable-phone-overlay_cups: not-affected
vivid/ubuntu-core_cups: DNE
wily_cups: not-affected
xenial_cups: not-affected
yakkety_cups: not-affected
zesty_cups: not-affected
devel_cups: not-affected

Patches_cupsys:
Priority_cupsys: negligible
upstream_cupsys: released (1.3.10)
dapper_cupsys: not-affected
gutsy_cupsys: not-affected
hardy_cupsys: not-affected
intrepid_cupsys: DNE
jaunty_cupsys: DNE
karmic_cupsys: DNE
lucid_cupsys: DNE
maverick_cupsys: DNE
natty_cupsys: DNE
oneiric_cupsys: DNE
precise_cupsys: DNE
precise/esm_cupsys: DNE
quantal_cupsys: DNE
raring_cupsys: DNE
saucy_cupsys: DNE
trusty_cupsys: DNE
utopic_cupsys: DNE
vivid_cupsys: DNE
vivid/stable-phone-overlay_cupsys: DNE
vivid/ubuntu-core_cupsys: DNE
wily_cupsys: DNE
xenial_cupsys: DNE
yakkety_cupsys: DNE
zesty_cupsys: DNE
devel_cupsys: DNE