CVE ID:	CVE-2009-3604
Description:	The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.
Test IDs:	1.3.6.1.4.1.25623.1.0.880909   1.3.6.1.4.1.25623.1.0.66139   1.3.6.1.4.1.25623.1.0.880758   1.3.6.1.4.1.25623.1.0.66013   1.3.6.1.4.1.25623.1.0.880700   1.3.6.1.4.1.25623.1.0.66017   1.3.6.1.4.1.25623.1.0.66015   1.3.6.1.4.1.25623.1.0.66140   1.3.6.1.4.1.25623.1.0.66943   1.3.6.1.4.1.25623.1.0.67264   1.3.6.1.4.1.25623.1.0.880912   1.3.6.1.4.1.25623.1.0.66014   1.3.6.1.4.1.25623.1.0.66938   1.3.6.1.4.1.25623.1.0.66012   1.3.6.1.4.1.25623.1.0.66945   1.3.6.1.4.1.25623.1.0.880906
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3604 1021706 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1 1023029 http://securitytracker.com/id?1023029 274030 http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1 36703 http://www.securityfocus.com/bid/36703 37023 http://secunia.com/advisories/37023 37028 http://secunia.com/advisories/37028 37037 http://secunia.com/advisories/37037 37042 http://secunia.com/advisories/37042 37043 http://secunia.com/advisories/37043 37053 http://secunia.com/advisories/37053 37077 http://secunia.com/advisories/37077 37079 http://secunia.com/advisories/37079 37114 http://secunia.com/advisories/37114 37159 http://secunia.com/advisories/37159 39327 http://secunia.com/advisories/39327 39938 http://secunia.com/advisories/39938 ADV-2009-2924 http://www.vupen.com/english/advisories/2009/2924 ADV-2009-2928 http://www.vupen.com/english/advisories/2009/2928 ADV-2010-0802 http://www.vupen.com/english/advisories/2010/0802 ADV-2010-1040 http://www.vupen.com/english/advisories/2010/1040 ADV-2010-1220 http://www.vupen.com/english/advisories/2010/1220 DSA-2028 http://www.debian.org/security/2010/dsa-2028 DSA-2050 http://www.debian.org/security/2010/dsa-2050 FEDORA-2009-10823 https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html FEDORA-2009-10845 https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html FEDORA-2010-1377 http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html FEDORA-2010-1805 http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html FEDORA-2010-1842 http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html MDVSA-2009:287 http://www.mandriva.com/security/advisories?name=MDVSA-2009:287 MDVSA-2010:087 http://www.mandriva.com/security/advisories?name=MDVSA-2010:087 MDVSA-2011:175 http://www.mandriva.com/security/advisories?name=MDVSA-2011:175 RHSA-2009:1500 https://rhn.redhat.com/errata/RHSA-2009-1500.html RHSA-2009:1501 https://rhn.redhat.com/errata/RHSA-2009-1501.html RHSA-2009:1502 https://rhn.redhat.com/errata/RHSA-2009-1502.html RHSA-2009:1503 https://rhn.redhat.com/errata/RHSA-2009-1503.html RHSA-2009:1512 https://rhn.redhat.com/errata/RHSA-2009-1512.html SUSE-SR:2009:018 http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html USN-850-1 http://www.ubuntu.com/usn/USN-850-1 USN-850-3 http://www.ubuntu.com/usn/USN-850-3 ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb2 http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb2 http://cgit.freedesktop.org/poppler/poppler/diff/?id=284a928996&id2=75c3466ba2 http://cgit.freedesktop.org/poppler/poppler/diff/?id=284a928996&id2=75c3466ba2 http://site.pi3.com.pl/adv/xpdf.txt http://site.pi3.com.pl/adv/xpdf.txt https://bugzilla.redhat.com/show_bug.cgi?id=526911 https://bugzilla.redhat.com/show_bug.cgi?id=526911 oval:org.mitre.oval:def:10969 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10969 xpdf-splashdrawimage-bo(53795) https://exchange.xforce.ibmcloud.com/vulnerabilities/53795