CVE-2009-1182: Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Pop...

Security readout for executives and security teams

This flaw affects PDF-processing components that decode JBIG2 MMR image data. A malicious PDF could trigger memory corruption and potentially run attacker-controlled code on systems using vulnerable Xpdf, CUPS, Poppler, or related products. Exposure is most likely where vulnerable PDF renderers, print services, or document-conversion pipelines process untrusted PDFs, including CUPS-backed printing and server-side PDF handling. Prioritize remediation on systems that automatically process external PDFs. The business risk is code execution from a document file, especially in print, upload, or conversion workflows. Urgency is high, but active exploitation is not established by the supplied sources. Mitigation focus: Inventory Xpdf, CUPS, Poppler, and bundled PDF-processing libraries.; Upgrade Poppler to 0.10.6 or later where applicable.; Apply relevant Debian, Red Hat, Slackware, or vendor security updates..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.