CVE-2009-0166

Priority
Description
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and
other products allows remote attackers to cause a denial of service (crash)
via a crafted PDF file that triggers a free of uninitialized memory.
References
Notes
keesthis is also CVE-2009-0146, CVE-2009-0147, but not CVE-2009-0165.
http://idisk.mac.com/drew_yao-Public/jbig2.zip
mdeslaurour cups uses the system pdftops, so we're not affected
jdstrandCUPS compiled with --disable-pdftops
sbeattieipe uses system pdflatex
Package
Source: cups (LP Ubuntu Debian)
Priority: Negligible
Upstream:released (1.3.10)
Ubuntu 18.04 LTS:not-affected
Ubuntu 20.04 LTS:not-affected
Ubuntu 21.10:not-affected
Ubuntu 16.04 ESM:not-affected
Ubuntu 22.04 LTS:not-affected
Ubuntu 14.04 ESM:DNE (trusty was not-affected)
Patches:
Package
Priority: Negligible
Upstream:released (1.3.10)
Ubuntu 18.04 LTS:DNE
Ubuntu 20.04 LTS:DNE
Ubuntu 21.10:DNE
Ubuntu 22.04 LTS:DNE
Ubuntu 14.04 ESM:DNE
Patches:
Package
Upstream:not-affected (linked to poppler)
Ubuntu 18.04 LTS:not-affected (linked to poppler)
Ubuntu 20.04 LTS:not-affected (linked to poppler)
Ubuntu 21.10:not-affected (linked to poppler)
Ubuntu 16.04 ESM:not-affected (linked to poppler)
Ubuntu 22.04 LTS:not-affected (linked to poppler)
Ubuntu 14.04 ESM:DNE (trusty was not-affected [linked to poppler])
Patches:
Package
Source: gpdf (LP Ubuntu Debian)
Upstream:needs-triage
Ubuntu 18.04 LTS:DNE
Ubuntu 20.04 LTS:DNE
Ubuntu 21.10:DNE
Ubuntu 22.04 LTS:DNE
Ubuntu 14.04 ESM:DNE
Patches:
Package
Source: ipe (LP Ubuntu Debian)
Upstream:needs-triage
Ubuntu 18.04 LTS:not-affected (uses system pdflatex)
Ubuntu 20.04 LTS:not-affected (uses system pdflatex)
Ubuntu 21.10:not-affected (uses system pdflatex)
Ubuntu 22.04 LTS:not-affected (uses system pdflatex)
Ubuntu 14.04 ESM:DNE (trusty was not-affected [uses system pdflatex])
Patches:
Package
Upstream:needs-triage
Ubuntu 18.04 LTS:DNE
Ubuntu 20.04 LTS:DNE
Ubuntu 21.10:DNE
Ubuntu 22.04 LTS:DNE
Ubuntu 14.04 ESM:DNE
Patches:
Package
Priority: Low
Upstream:needs-triage
Ubuntu 18.04 LTS:DNE
Ubuntu 20.04 LTS:DNE
Ubuntu 21.10:DNE
Ubuntu 22.04 LTS:DNE
Ubuntu 14.04 ESM:DNE
Patches:
Package
Upstream:needs-triage
Ubuntu 18.04 LTS:needs-triage
Ubuntu 20.04 LTS:needs-triage
Ubuntu 21.10:needs-triage
Ubuntu 22.04 LTS:needs-triage
Ubuntu 14.04 ESM:DNE (trusty was needs-triage)
Patches:
Package
Upstream:needs-triage
Ubuntu 18.04 LTS:DNE
Ubuntu 20.04 LTS:DNE
Ubuntu 21.10:DNE
Ubuntu 22.04 LTS:DNE
Ubuntu 14.04 ESM:DNE
Patches:
Package
Upstream:needs-triage
Ubuntu 18.04 LTS:DNE
Ubuntu 20.04 LTS:DNE
Ubuntu 21.10:DNE
Ubuntu 22.04 LTS:DNE
Ubuntu 14.04 ESM:DNE
Patches:
Package
Upstream:needs-triage
Ubuntu 18.04 LTS:released (0.10.5-1ubuntu2)
Ubuntu 20.04 LTS:released (0.10.5-1ubuntu2)
Ubuntu 21.10:released (0.10.5-1ubuntu2)
Ubuntu 16.04 ESM:released (0.10.5-1ubuntu2)
Ubuntu 22.04 LTS:released (0.10.5-1ubuntu2)
Ubuntu 14.04 ESM:DNE (trusty was released [0.10.5-1ubuntu2])
Patches:
Package
Upstream:needs-triage
Ubuntu 18.04 LTS:DNE
Ubuntu 20.04 LTS:DNE
Ubuntu 21.10:DNE
Ubuntu 22.04 LTS:DNE
Ubuntu 14.04 ESM:DNE
Patches:
Package
Upstream:needs-triage
Ubuntu 18.04 LTS:not-affected (linked to poppler)
Ubuntu 20.04 LTS:not-affected (linked to poppler)
Ubuntu 21.10:not-affected (linked to poppler)
Ubuntu 16.04 ESM:not-affected (linked to poppler)
Ubuntu 22.04 LTS:not-affected (linked to poppler)
Ubuntu 14.04 ESM:DNE (trusty was not-affected [linked to poppler])
Patches:
Package
Source: xpdf (LP Ubuntu Debian)
Upstream:released (3.02-2)
Ubuntu 18.04 LTS:not-affected (3.02-2)
Ubuntu 20.04 LTS:DNE
Ubuntu 21.10:not-affected (3.02-2)
Ubuntu 22.04 LTS:not-affected (3.02-2)
Ubuntu 14.04 ESM:DNE (trusty was not-affected [3.02-2])
Patches:
More Information

Updated: 2022-04-25 00:14:20 UTC (commit ecc1009cb19540b950de59270950018900f37f15)