CVE-2009-3609: Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler b...

Security readout for executives and security teams

CVE-2009-3609 is a PDF parsing flaw in older Xpdf and Poppler code. A malicious PDF can crash an application that opens or converts it. Business impact is mainly denial of service, especially where PDF processing is automated, such as print conversion workflows. Exposure is most likely on legacy Linux/Unix systems, old desktop PDF viewers, or print servers using vulnerable Xpdf/Poppler libraries. Internet exposure depends on whether systems automatically accept and process untrusted PDFs. Treat as a legacy exposure cleanup item unless untrusted PDFs are processed automatically. Prioritize print servers, document ingestion pipelines, and shared systems where crashes disrupt operations. Mitigation focus: Upgrade Xpdf to 3.02pl4 or later where used.; Upgrade Poppler to 0.12.1 or later where used.; Apply relevant vendor distribution advisories for affected packages..

Prepared

Jun 28, 2026, 19:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.