Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-neug-nxbs-xqcw

Summary Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.

Aliases

alias	CVE-2009-0147

Fixed_packages

url	pkg:deb/debian/cups@0?distro=trixie
purl	pkg:deb/debian/cups@0?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/cups@0%3Fdistro=trixie

url pkg:deb/debian/cups@2.3.3op2-3%2Bdeb11u8?distro=trixie

purl pkg:deb/debian/cups@2.3.3op2-3%2Bdeb11u8?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1wfz-u1qd-8uce

vulnerability	VCID-4jhb-rh62-4ke5

vulnerability	VCID-8vbg-dcp3-n7fp

vulnerability	VCID-9cd4-uus2-97c1

vulnerability	VCID-gxr3-588f-ubh9

vulnerability	VCID-mwkj-qy8g-vbgj

vulnerability	VCID-q3af-s63q-m3hf

vulnerability	VCID-shvg-s168-qqb5

vulnerability	VCID-vzg1-7brk-f3hj

vulnerability	VCID-zsc7-csmh-cqdv

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cups@2.3.3op2-3%252Bdeb11u8%3Fdistro=trixie

url pkg:deb/debian/cups@2.4.2-3%2Bdeb12u9?distro=trixie

purl pkg:deb/debian/cups@2.4.2-3%2Bdeb12u9?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1wfz-u1qd-8uce

vulnerability	VCID-4jhb-rh62-4ke5

vulnerability	VCID-8vbg-dcp3-n7fp

vulnerability	VCID-9cd4-uus2-97c1

vulnerability	VCID-gxr3-588f-ubh9

vulnerability	VCID-mwkj-qy8g-vbgj

vulnerability	VCID-q3af-s63q-m3hf

vulnerability	VCID-shvg-s168-qqb5

vulnerability	VCID-vzg1-7brk-f3hj

vulnerability	VCID-zsc7-csmh-cqdv

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cups@2.4.2-3%252Bdeb12u9%3Fdistro=trixie

url pkg:deb/debian/cups@2.4.10-3%2Bdeb13u2?distro=trixie

purl pkg:deb/debian/cups@2.4.10-3%2Bdeb13u2?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1wfz-u1qd-8uce

vulnerability	VCID-4jhb-rh62-4ke5

vulnerability	VCID-8vbg-dcp3-n7fp

vulnerability	VCID-9cd4-uus2-97c1

vulnerability	VCID-gxr3-588f-ubh9

vulnerability	VCID-mwkj-qy8g-vbgj

vulnerability	VCID-q3af-s63q-m3hf

vulnerability	VCID-shvg-s168-qqb5

vulnerability	VCID-vzg1-7brk-f3hj

vulnerability	VCID-zsc7-csmh-cqdv

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cups@2.4.10-3%252Bdeb13u2%3Fdistro=trixie

url	pkg:deb/debian/cups@2.4.18-1?distro=trixie
purl	pkg:deb/debian/cups@2.4.18-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/cups@2.4.18-1%3Fdistro=trixie

url	pkg:deb/debian/poppler@0.10.6-1?distro=trixie
purl	pkg:deb/debian/poppler@0.10.6-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.10.6-1%3Fdistro=trixie

url pkg:deb/debian/poppler@20.09.0-3.1%2Bdeb11u1?distro=trixie

purl pkg:deb/debian/poppler@20.09.0-3.1%2Bdeb11u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-25s4-qujz-8kcf

vulnerability	VCID-4n4u-c4u9-kkep

vulnerability	VCID-4y9q-jfwk-5bde

vulnerability	VCID-arhw-n285-r3dv

vulnerability	VCID-e3pp-vnez-rude

vulnerability	VCID-r2f4-bgaw-t7gu

vulnerability	VCID-sw3e-49nw-w7fv

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@20.09.0-3.1%252Bdeb11u1%3Fdistro=trixie

url pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie

purl pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-25s4-qujz-8kcf

vulnerability	VCID-4n4u-c4u9-kkep

vulnerability	VCID-4y9q-jfwk-5bde

vulnerability	VCID-arhw-n285-r3dv

vulnerability	VCID-e3pp-vnez-rude

vulnerability	VCID-r2f4-bgaw-t7gu

vulnerability	VCID-sw3e-49nw-w7fv

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@22.12.0-2%252Bdeb12u1%3Fdistro=trixie

url pkg:deb/debian/poppler@25.03.0-5%2Bdeb13u2?distro=trixie

purl pkg:deb/debian/poppler@25.03.0-5%2Bdeb13u2?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4n4u-c4u9-kkep

vulnerability	VCID-4y9q-jfwk-5bde

vulnerability	VCID-e3pp-vnez-rude

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@25.03.0-5%252Bdeb13u2%3Fdistro=trixie

url pkg:deb/debian/poppler@25.03.0-11.1?distro=trixie

purl pkg:deb/debian/poppler@25.03.0-11.1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-e3pp-vnez-rude

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@25.03.0-11.1%3Fdistro=trixie

url	pkg:deb/debian/poppler@26.01.0-4.1?distro=trixie
purl	pkg:deb/debian/poppler@26.01.0-4.1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@26.01.0-4.1%3Fdistro=trixie

url	pkg:deb/debian/xpdf@3.02-1.4%2Blenny1?distro=trixie
purl	pkg:deb/debian/xpdf@3.02-1.4%2Blenny1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/xpdf@3.02-1.4%252Blenny1%3Fdistro=trixie

url	pkg:deb/debian/xpdf@3.04%2Bgit20210103-3?distro=trixie
purl	pkg:deb/debian/xpdf@3.04%2Bgit20210103-3?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/xpdf@3.04%252Bgit20210103-3%3Fdistro=trixie

url	pkg:deb/debian/xpdf@3.04%2Bgit20220601-1?distro=trixie
purl	pkg:deb/debian/xpdf@3.04%2Bgit20220601-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/xpdf@3.04%252Bgit20220601-1%3Fdistro=trixie

url	pkg:deb/debian/xpdf@3.04%2Bgit20250304-1?distro=trixie
purl	pkg:deb/debian/xpdf@3.04%2Bgit20250304-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/xpdf@3.04%252Bgit20250304-1%3Fdistro=trixie

url	pkg:deb/debian/xpdf@3.04%2Bgit20260220-1?distro=trixie
purl	pkg:deb/debian/xpdf@3.04%2Bgit20260220-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/xpdf@3.04%252Bgit20260220-1%3Fdistro=trixie

url	pkg:ebuild/app-text/poppler@0.22.2-r1
purl	pkg:ebuild/app-text/poppler@0.22.2-r1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/app-text/poppler@0.22.2-r1

url	pkg:ebuild/net-print/cups@1.3.10
purl	pkg:ebuild/net-print/cups@1.3.10
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/net-print/cups@1.3.10

Affected_packages

url pkg:rpm/redhat/cups@1:1.1.22-0.rc1.9.27.el4_7?arch=5

purl pkg:rpm/redhat/cups@1:1.1.22-0.rc1.9.27.el4_7?arch=5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7pe4-yqs7-jydr

vulnerability	VCID-d1gz-vca5-sfgs

vulnerability	VCID-grqx-q3eu-xyg4

vulnerability	VCID-neug-nxbs-xqcw

vulnerability	VCID-nmcj-bzmn-uqcm

vulnerability	VCID-qy8a-uthf-a7b6

vulnerability	VCID-rpef-4zr8-aqfk

vulnerability	VCID-us8u-yvnn-t7bf

vulnerability	VCID-uw3v-q3yq-4khu

vulnerability	VCID-x3ng-2ehg-mbcg

vulnerability	VCID-xphd-6816-c3gw

vulnerability	VCID-z4hy-jaay-y7av

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cups@1:1.1.22-0.rc1.9.27.el4_7%3Farch=5

url pkg:rpm/redhat/cups@1:1.3.7-8.el5_3?arch=4

purl pkg:rpm/redhat/cups@1:1.3.7-8.el5_3?arch=4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7pe4-yqs7-jydr

vulnerability	VCID-d1gz-vca5-sfgs

vulnerability	VCID-grqx-q3eu-xyg4

vulnerability	VCID-neug-nxbs-xqcw

vulnerability	VCID-nmcj-bzmn-uqcm

vulnerability	VCID-qy8a-uthf-a7b6

vulnerability	VCID-rpef-4zr8-aqfk

vulnerability	VCID-us8u-yvnn-t7bf

vulnerability	VCID-uw3v-q3yq-4khu

vulnerability	VCID-x3ng-2ehg-mbcg

vulnerability	VCID-xphd-6816-c3gw

vulnerability	VCID-z4hy-jaay-y7av

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cups@1:1.3.7-8.el5_3%3Farch=4

url pkg:rpm/redhat/gpdf@2.8.2-7.7.2.el4_7?arch=4

purl pkg:rpm/redhat/gpdf@2.8.2-7.7.2.el4_7?arch=4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7pe4-yqs7-jydr

vulnerability	VCID-d1gz-vca5-sfgs

vulnerability	VCID-grqx-q3eu-xyg4

vulnerability	VCID-neug-nxbs-xqcw

vulnerability	VCID-nmcj-bzmn-uqcm

vulnerability	VCID-qy8a-uthf-a7b6

vulnerability	VCID-rpef-4zr8-aqfk

vulnerability	VCID-tqdn-gsam-sfg2

vulnerability	VCID-us8u-yvnn-t7bf

vulnerability	VCID-x3ng-2ehg-mbcg

vulnerability	VCID-xphd-6816-c3gw

vulnerability	VCID-z4hy-jaay-y7av

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/gpdf@2.8.2-7.7.2.el4_7%3Farch=4

url pkg:rpm/redhat/kdegraphics@7:3.3.1-13?arch=el4

purl pkg:rpm/redhat/kdegraphics@7:3.3.1-13?arch=el4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7pe4-yqs7-jydr

vulnerability	VCID-d1gz-vca5-sfgs

vulnerability	VCID-grqx-q3eu-xyg4

vulnerability	VCID-neug-nxbs-xqcw

vulnerability	VCID-nmcj-bzmn-uqcm

vulnerability	VCID-qy8a-uthf-a7b6

vulnerability	VCID-rpef-4zr8-aqfk

vulnerability	VCID-us8u-yvnn-t7bf

vulnerability	VCID-x3ng-2ehg-mbcg

vulnerability	VCID-xphd-6816-c3gw

vulnerability	VCID-z4hy-jaay-y7av

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/kdegraphics@7:3.3.1-13%3Farch=el4

url pkg:rpm/redhat/kdegraphics@7:3.5.4-12?arch=el5_3

purl pkg:rpm/redhat/kdegraphics@7:3.5.4-12?arch=el5_3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7pe4-yqs7-jydr

vulnerability	VCID-d1gz-vca5-sfgs

vulnerability	VCID-grqx-q3eu-xyg4

vulnerability	VCID-neug-nxbs-xqcw

vulnerability	VCID-nmcj-bzmn-uqcm

vulnerability	VCID-qy8a-uthf-a7b6

vulnerability	VCID-rpef-4zr8-aqfk

vulnerability	VCID-us8u-yvnn-t7bf

vulnerability	VCID-x3ng-2ehg-mbcg

vulnerability	VCID-xphd-6816-c3gw

vulnerability	VCID-z4hy-jaay-y7av

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/kdegraphics@7:3.5.4-12%3Farch=el5_3

url pkg:rpm/redhat/poppler@0.5.4-4.4.el5_3?arch=9

purl pkg:rpm/redhat/poppler@0.5.4-4.4.el5_3?arch=9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3kna-tmpr-wqdu

vulnerability	VCID-5dpt-nn1s-kyec

vulnerability	VCID-7pe4-yqs7-jydr

vulnerability	VCID-97fh-jnxr-zyc8

vulnerability	VCID-b3pu-9zxj-a3bv

vulnerability	VCID-d1gz-vca5-sfgs

vulnerability	VCID-grqx-q3eu-xyg4

vulnerability	VCID-neug-nxbs-xqcw

vulnerability	VCID-nmcj-bzmn-uqcm

vulnerability	VCID-qy8a-uthf-a7b6

vulnerability	VCID-rpef-4zr8-aqfk

vulnerability	VCID-tqdn-gsam-sfg2

vulnerability	VCID-us8u-yvnn-t7bf

vulnerability	VCID-x3ng-2ehg-mbcg

vulnerability	VCID-xphd-6816-c3gw

vulnerability	VCID-z4hy-jaay-y7av

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/poppler@0.5.4-4.4.el5_3%3Farch=9

url pkg:rpm/redhat/tetex@2.0.2-22.0.1.EL4?arch=16

purl pkg:rpm/redhat/tetex@2.0.2-22.0.1.EL4?arch=16

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2jed-z6jb-qkhu

vulnerability	VCID-7pe4-yqs7-jydr

vulnerability	VCID-b3pu-9zxj-a3bv

vulnerability	VCID-bzn5-1h8a-pufe

vulnerability	VCID-d1gz-vca5-sfgs

vulnerability	VCID-f21v-2kf8-fkas

vulnerability	VCID-frau-qtvh-93bs

vulnerability	VCID-grqx-q3eu-xyg4

vulnerability	VCID-neug-nxbs-xqcw

vulnerability	VCID-nmcj-bzmn-uqcm

vulnerability	VCID-prmx-fa37-3ff7

vulnerability	VCID-qy8a-uthf-a7b6

vulnerability	VCID-rpef-4zr8-aqfk

vulnerability	VCID-us8u-yvnn-t7bf

vulnerability	VCID-x3ng-2ehg-mbcg

vulnerability	VCID-xphd-6816-c3gw

vulnerability	VCID-z4hy-jaay-y7av

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tetex@2.0.2-22.0.1.EL4%3Farch=16

url pkg:rpm/redhat/tetex@3.0-33.8.el5_5?arch=5

purl pkg:rpm/redhat/tetex@3.0-33.8.el5_5?arch=5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3pfn-gq15-suez

vulnerability	VCID-7pe4-yqs7-jydr

vulnerability	VCID-b3pu-9zxj-a3bv

vulnerability	VCID-bzn5-1h8a-pufe

vulnerability	VCID-d1gz-vca5-sfgs

vulnerability	VCID-f21v-2kf8-fkas

vulnerability	VCID-frau-qtvh-93bs

vulnerability	VCID-grqx-q3eu-xyg4

vulnerability	VCID-neug-nxbs-xqcw

vulnerability	VCID-nmcj-bzmn-uqcm

vulnerability	VCID-nvaf-cdp6-tuev

vulnerability	VCID-qy8a-uthf-a7b6

vulnerability	VCID-rpef-4zr8-aqfk

vulnerability	VCID-us8u-yvnn-t7bf

vulnerability	VCID-x3ng-2ehg-mbcg

vulnerability	VCID-xphd-6816-c3gw

vulnerability	VCID-z4hy-jaay-y7av

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tetex@3.0-33.8.el5_5%3Farch=5

url pkg:rpm/redhat/xpdf@1:2.02-14?arch=el3

purl pkg:rpm/redhat/xpdf@1:2.02-14?arch=el3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7pe4-yqs7-jydr

vulnerability	VCID-d1gz-vca5-sfgs

vulnerability	VCID-grqx-q3eu-xyg4

vulnerability	VCID-neug-nxbs-xqcw

vulnerability	VCID-nmcj-bzmn-uqcm

vulnerability	VCID-qy8a-uthf-a7b6

vulnerability	VCID-rpef-4zr8-aqfk

vulnerability	VCID-us8u-yvnn-t7bf

vulnerability	VCID-x3ng-2ehg-mbcg

vulnerability	VCID-xphd-6816-c3gw

vulnerability	VCID-z4hy-jaay-y7av

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/xpdf@1:2.02-14%3Farch=el3

url pkg:rpm/redhat/xpdf@1:3.00-20?arch=el4

purl pkg:rpm/redhat/xpdf@1:3.00-20?arch=el4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7pe4-yqs7-jydr

vulnerability	VCID-d1gz-vca5-sfgs

vulnerability	VCID-grqx-q3eu-xyg4

vulnerability	VCID-neug-nxbs-xqcw

vulnerability	VCID-nmcj-bzmn-uqcm

vulnerability	VCID-qy8a-uthf-a7b6

vulnerability	VCID-rpef-4zr8-aqfk

vulnerability	VCID-us8u-yvnn-t7bf

vulnerability	VCID-x3ng-2ehg-mbcg

vulnerability	VCID-xphd-6816-c3gw

vulnerability	VCID-z4hy-jaay-y7av

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/xpdf@1:3.00-20%3Farch=el4

References

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0147.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0147.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2009-0147

reference_id

reference_type

scores

value	0.02384
scoring_system	epss
scoring_elements	0.85291
published_at	2026-06-04T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2009-0147

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=490614
reference_id	490614
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=490614

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=524806
reference_id	524806
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=524806

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=524809
reference_id	524809
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=524809

reference_url	https://security.gentoo.org/glsa/200904-20
reference_id	GLSA-200904-20
reference_type
scores
url	https://security.gentoo.org/glsa/200904-20

reference_url	https://security.gentoo.org/glsa/201310-03
reference_id	GLSA-201310-03
reference_type
scores
url	https://security.gentoo.org/glsa/201310-03

reference_url	https://access.redhat.com/errata/RHSA-2009:0429
reference_id	RHSA-2009:0429
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2009:0429

reference_url	https://access.redhat.com/errata/RHSA-2009:0430
reference_id	RHSA-2009:0430
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2009:0430

reference_url	https://access.redhat.com/errata/RHSA-2009:0431
reference_id	RHSA-2009:0431
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2009:0431

reference_url	https://access.redhat.com/errata/RHSA-2009:0458
reference_id	RHSA-2009:0458
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2009:0458

reference_url	https://access.redhat.com/errata/RHSA-2009:0480
reference_id	RHSA-2009:0480
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2009:0480

reference_url	https://access.redhat.com/errata/RHSA-2010:0399
reference_id	RHSA-2010:0399
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2010:0399

reference_url	https://access.redhat.com/errata/RHSA-2010:0400
reference_id	RHSA-2010:0400
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2010:0400

Weaknesses

cwe_id	190
name	Integer Overflow or Wraparound
description	The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.

Exploits

Severity_range_score null

Exploitability 0.5

Weighted_severity 0.0

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-neug-nxbs-xqcw

Vulnerability Instance