CVE-2009-1187: Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a...

Security readout for executives and security teams

CVE-2009-1187 is a Poppler document-rendering flaw in JBIG2 decoding. A malicious file processed by a vulnerable Poppler version could crash the renderer and may allow code execution. The provided sources identify Poppler before 0.10.6 as affected. Exposure is most likely where legacy Linux or application stacks still use Poppler before 0.10.6 to process untrusted documents. Systems using distribution-maintained Poppler packages should be checked against their vendor advisories. Prioritize remediation if Poppler handles untrusted documents in production, email, upload, or automation workflows. This is an older vulnerability, but legacy exposure can persist and the stated impact includes possible code execution. Mitigation focus: Upgrade Poppler to version 0.10.6 or later where applicable.; Apply vendor security updates from the relevant Linux distribution advisory.; Identify embedded or bundled Poppler copies in applications and appliances..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.