CVE ID:	CVE-2009-3605
Description:	Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, related to (1) glib/poppler-page.cc; (2) ArthurOutputDev.cc, (3) CairoOutputDev.cc, (4) GfxState.cc, (5) JBIG2Stream.cc, (6) PSOutputDev.cc, and (7) SplashOutputDev.cc in poppler/; and (8) SplashBitmap.cc, (9) Splash.cc, and (10) SplashFTFont.cc in splash/. NOTE: this may overlap CVE-2009-0791.
Test IDs:	1.3.6.1.4.1.25623.1.0.66113
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3605 http://www.mandriva.com/security/advisories?name=MDVSA-2009:334 http://www.mandriva.com/security/advisories?name=MDVSA-2011:175 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7731 http://secunia.com/advisories/37114 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1 SuSE Security Announcement: SUSE-SR:2009:018 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html http://www.ubuntu.com/usn/USN-850-1