Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:rpm/redhat/cups@1:1.3.7-11.el5_4?arch=3

Type rpm

Namespace redhat

Name cups

Version 1:1.3.7-11.el5_4

Qualifiers

arch	3

Subpath

Is_vulnerable true

Next_non_vulnerable_version null

Latest_non_vulnerable_version null

Affected_by_vulnerabilities

url

VCID-3pfn-gq15-suez

vulnerability_id

VCID-3pfn-gq15-suez

summary

Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.

references

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3608.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3608.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2009-3608

reference_id

reference_type

scores

value	0.12664
scoring_system	epss
scoring_elements	0.94107
published_at	2026-06-04T12:55:00Z

value	0.12664
scoring_system	epss
scoring_elements	0.94115
published_at	2026-06-05T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2009-3608

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3608
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3608

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=526637
reference_id	526637
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=526637

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=551287
reference_id	551287
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=551287

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=551289
reference_id	551289
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=551289

reference_url	https://security.gentoo.org/glsa/201310-03
reference_id	GLSA-201310-03
reference_type
scores
url	https://security.gentoo.org/glsa/201310-03

reference_url	https://access.redhat.com/errata/RHSA-2009:1501
reference_id	RHSA-2009:1501
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2009:1501

reference_url	https://access.redhat.com/errata/RHSA-2009:1502
reference_id	RHSA-2009:1502
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2009:1502

reference_url	https://access.redhat.com/errata/RHSA-2009:1503
reference_id	RHSA-2009:1503
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2009:1503

reference_url	https://access.redhat.com/errata/RHSA-2009:1504
reference_id	RHSA-2009:1504
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2009:1504

reference_url	https://access.redhat.com/errata/RHSA-2009:1512
reference_id	RHSA-2009:1512
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2009:1512

reference_url	https://access.redhat.com/errata/RHSA-2009:1513
reference_id	RHSA-2009:1513
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2009:1513

reference_url	https://access.redhat.com/errata/RHSA-2010:0400
reference_id	RHSA-2010:0400
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2010:0400

reference_url	https://usn.ubuntu.com/850-1/
reference_id	USN-850-1
reference_type
scores
url	https://usn.ubuntu.com/850-1/

reference_url	https://usn.ubuntu.com/850-3/
reference_id	USN-850-3
reference_type
scores
url	https://usn.ubuntu.com/850-3/

reference_url	https://usn.ubuntu.com/973-1/
reference_id	USN-973-1
reference_type
scores
url	https://usn.ubuntu.com/973-1/

fixed_packages

aliases

CVE-2009-3608

risk_score

0.1

exploitability

0.5

weighted_severity

0.1

resource_url

http://public2.vulnerablecode.io/vulnerabilities/VCID-3pfn-gq15-suez

url

VCID-bzn5-1h8a-pufe

vulnerability_id

VCID-bzn5-1h8a-pufe

summary

Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.

references

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3609.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3609.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2009-3609

reference_id

reference_type

scores

value	0.05999
scoring_system	epss
scoring_elements	0.90846
published_at	2026-06-04T12:55:00Z

value	0.05999
scoring_system	epss
scoring_elements	0.9086
published_at	2026-06-05T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2009-3609

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3609
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3609

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=526893
reference_id	526893
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=526893

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=551287
reference_id	551287
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=551287

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=551289
reference_id	551289
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=551289

reference_url	https://security.gentoo.org/glsa/201310-03
reference_id	GLSA-201310-03
reference_type
scores
url	https://security.gentoo.org/glsa/201310-03

reference_url	https://access.redhat.com/errata/RHSA-2009:1500
reference_id	RHSA-2009:1500
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2009:1500

reference_url	https://access.redhat.com/errata/RHSA-2009:1501
reference_id	RHSA-2009:1501
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2009:1501

reference_url	https://access.redhat.com/errata/RHSA-2009:1502
reference_id	RHSA-2009:1502
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2009:1502

reference_url	https://access.redhat.com/errata/RHSA-2009:1503
reference_id	RHSA-2009:1503
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2009:1503

reference_url	https://access.redhat.com/errata/RHSA-2009:1504
reference_id	RHSA-2009:1504
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2009:1504

reference_url	https://access.redhat.com/errata/RHSA-2009:1512
reference_id	RHSA-2009:1512
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2009:1512

reference_url	https://access.redhat.com/errata/RHSA-2009:1513
reference_id	RHSA-2009:1513
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2009:1513

reference_url	https://access.redhat.com/errata/RHSA-2010:0399
reference_id	RHSA-2010:0399
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2010:0399

reference_url	https://access.redhat.com/errata/RHSA-2010:0400
reference_id	RHSA-2010:0400
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2010:0400

reference_url	https://access.redhat.com/errata/RHSA-2010:0401
reference_id	RHSA-2010:0401
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2010:0401

reference_url	https://access.redhat.com/errata/RHSA-2010:0755
reference_id	RHSA-2010:0755
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2010:0755

reference_url	https://usn.ubuntu.com/850-1/
reference_id	USN-850-1
reference_type
scores
url	https://usn.ubuntu.com/850-1/

reference_url	https://usn.ubuntu.com/850-3/
reference_id	USN-850-3
reference_type
scores
url	https://usn.ubuntu.com/850-3/

reference_url	https://usn.ubuntu.com/973-1/
reference_id	USN-973-1
reference_type
scores
url	https://usn.ubuntu.com/973-1/

fixed_packages

aliases

CVE-2009-3609

risk_score

0.1

exploitability

0.5

weighted_severity

0.1

resource_url

http://public2.vulnerablecode.io/vulnerabilities/VCID-bzn5-1h8a-pufe

Fixing_vulnerabilities

Risk_score 0.1

Resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cups@1:1.3.7-11.el5_4%3Farch=3

Package Instance