Sign-up

ID

VAR-200906-0618


CVE

CVE-2009-0791


TITLE

CUPS of pdftops Integer overflow vulnerability in filters

Trust: 0.8

sources: JVNDB: JVNDB-2009-001734

DESCRIPTION

Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179. CUPS of pdftops The filter includes PDF Insufficient service operation due to incomplete file processing (DoS) Vulnerabilities exist that could be exploited or arbitrary code executed.Crafted by a third party PDF Service operation disrupted by file (DoS) May be executed, or arbitrary code may be executed. CUPS is prone to multiple heap-based buffer-overflow vulnerabilities because it fails to properly bounds-check user-supplied input before copying it into a finite-sized buffer. Exploiting these issues may allow remote attackers to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause denial-of-service conditions. Xpdf is an open source viewer for Portable Document Format (PDF) files. NOTE: This may override CVE-2009-0791. (CVE-2009-0791). (CVE-2009-1709). This update provides a solution to this vulnerability. (CVE-2009-0163) Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to g*allocn. (CVE-2009-0800) The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags. (CVE-2009-1183) Two integer overflow flaws were found in the CUPS pdftops filter. An attacker could create a malicious PDF file that would cause pdftops to crash or, potentially, execute arbitrary code as the lp user if the file was printed. (CVE-2009-3608, CVE-2009-3609) This update corrects the problems. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0146 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0147 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0163 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0165 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0166 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0195 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0791 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0799 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0800 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0949 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1179 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1180 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1181 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1182 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1183 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3608 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3609 _______________________________________________________________________ Updated Packages: Mandriva Linux 2009.0: 5afef470fbd90b1ba91bb3c4ba83d3d9 2009.0/i586/acl-2.2.47-4.1mdv2009.0.i586.rpm f6c458ac101765b7be2b03983f5053e9 2009.0/i586/cups-1.3.10-0.2mdv2009.0.i586.rpm 57e96e7061b8f648555171a54f4de57d 2009.0/i586/cups-common-1.3.10-0.2mdv2009.0.i586.rpm 9ceeca29ea654b5941ce9dc119d77915 2009.0/i586/cups-serial-1.3.10-0.2mdv2009.0.i586.rpm 3de9be03b7c47725cecce48a981623ec 2009.0/i586/libacl1-2.2.47-4.1mdv2009.0.i586.rpm ad812a8c58c3d07c98262df1f3e3f45b 2009.0/i586/libacl-devel-2.2.47-4.1mdv2009.0.i586.rpm 6fddee7c9701335f4b6505ba1a125417 2009.0/i586/libcups2-1.3.10-0.2mdv2009.0.i586.rpm 668ee622e663fef6d458cfc08ac345a3 2009.0/i586/libcups2-devel-1.3.10-0.2mdv2009.0.i586.rpm f02791fa357fd1b11d627184fe6023f9 2009.0/i586/libpoppler3-0.8.7-2.3mdv2009.0.i586.rpm 237284c6152a84eb858256a347250e31 2009.0/i586/libpoppler-devel-0.8.7-2.3mdv2009.0.i586.rpm e6008cb60171a0f2ddbc76a394b87c4b 2009.0/i586/libpoppler-glib3-0.8.7-2.3mdv2009.0.i586.rpm 24755af7d9d2f4dee1c90fc592e9f576 2009.0/i586/libpoppler-glib-devel-0.8.7-2.3mdv2009.0.i586.rpm d7e9ced5a0d7056a27ef2ca3df50188a 2009.0/i586/libpoppler-qt2-0.8.7-2.3mdv2009.0.i586.rpm ddafea6d6ff4be8996d681b50e71360d 2009.0/i586/libpoppler-qt4-3-0.8.7-2.3mdv2009.0.i586.rpm 6debb46b2e51bb9abae8ae224f8db0f1 2009.0/i586/libpoppler-qt4-devel-0.8.7-2.3mdv2009.0.i586.rpm f0fbc61c0e1d631e97f22f6a4d278c70 2009.0/i586/libpoppler-qt-devel-0.8.7-2.3mdv2009.0.i586.rpm ca32c3f529c9a1e676ea8dacc3c6f888 2009.0/i586/php-cups-1.3.10-0.2mdv2009.0.i586.rpm ab5e168e0e4d8e473f45b7a44fb1c8f0 2009.0/i586/poppler-0.8.7-2.3mdv2009.0.i586.rpm 65c09a60591a58ae496b323e0e8fe86a 2009.0/SRPMS/acl-2.2.47-4.1mdv2009.0.src.rpm 089453e069614cf9f4a9b0b81e93706e 2009.0/SRPMS/cups-1.3.10-0.2mdv2009.0.src.rpm be5c0733d2cdd537ac1eea6c995a940f 2009.0/SRPMS/poppler-0.8.7-2.3mdv2009.0.src.rpm Mandriva Linux 2009.0/X86_64: a76ac52d03f6f4dc3fe1506801e1e21b 2009.0/x86_64/acl-2.2.47-4.1mdv2009.0.x86_64.rpm 525c24a89bab12d3e15b51b4c97d1358 2009.0/x86_64/cups-1.3.10-0.2mdv2009.0.x86_64.rpm 3571d5eb4f123e668b5adf69e986372b 2009.0/x86_64/cups-common-1.3.10-0.2mdv2009.0.x86_64.rpm b39c9243e550ffc65de2237195bc26a4 2009.0/x86_64/cups-serial-1.3.10-0.2mdv2009.0.x86_64.rpm 2837588f649089d0821304b0805d340c 2009.0/x86_64/lib64acl1-2.2.47-4.1mdv2009.0.x86_64.rpm cdfca8cfad651d282f96d40fd75a4596 2009.0/x86_64/lib64acl-devel-2.2.47-4.1mdv2009.0.x86_64.rpm f6af0d4a008cfef6ee33d57e0d968833 2009.0/x86_64/lib64cups2-1.3.10-0.2mdv2009.0.x86_64.rpm 5b60fff9db65f33fef1e8b279d27297f 2009.0/x86_64/lib64cups2-devel-1.3.10-0.2mdv2009.0.x86_64.rpm aae343ba528a86feb7f4f4ea958e6830 2009.0/x86_64/lib64poppler3-0.8.7-2.3mdv2009.0.x86_64.rpm de8da0007d86c8331ab187f03f07f57b 2009.0/x86_64/lib64poppler-devel-0.8.7-2.3mdv2009.0.x86_64.rpm 3dde1055871d4ac1dad4a66017fd0b0a 2009.0/x86_64/lib64poppler-glib3-0.8.7-2.3mdv2009.0.x86_64.rpm 8ccbbd75f41f86c803eb9ccdca254d4c 2009.0/x86_64/lib64poppler-glib-devel-0.8.7-2.3mdv2009.0.x86_64.rpm a1daabbf13cded9a785d62f088c76661 2009.0/x86_64/lib64poppler-qt2-0.8.7-2.3mdv2009.0.x86_64.rpm a2d283827fd14321ab42c8eda701b7f2 2009.0/x86_64/lib64poppler-qt4-3-0.8.7-2.3mdv2009.0.x86_64.rpm 9e2f0f9b23c1365a0b1d49254aab3199 2009.0/x86_64/lib64poppler-qt4-devel-0.8.7-2.3mdv2009.0.x86_64.rpm bb32350e6a9ee7a7be1b3562ed1282fc 2009.0/x86_64/lib64poppler-qt-devel-0.8.7-2.3mdv2009.0.x86_64.rpm cb750cc3313fdb7f045c85aa186735d5 2009.0/x86_64/php-cups-1.3.10-0.2mdv2009.0.x86_64.rpm 8882c7aef8572a7342db51dca0d0f444 2009.0/x86_64/poppler-0.8.7-2.3mdv2009.0.x86_64.rpm 65c09a60591a58ae496b323e0e8fe86a 2009.0/SRPMS/acl-2.2.47-4.1mdv2009.0.src.rpm 089453e069614cf9f4a9b0b81e93706e 2009.0/SRPMS/cups-1.3.10-0.2mdv2009.0.src.rpm be5c0733d2cdd537ac1eea6c995a940f 2009.0/SRPMS/poppler-0.8.7-2.3mdv2009.0.src.rpm Mandriva Enterprise Server 5: 3d022011977e4a10551f4a56251ce5fa mes5/i586/acl-2.2.47-4.1mdvmes5.i586.rpm c29a689a2db186046756a9e5e2c0a8f3 mes5/i586/cups-1.3.10-0.2mdvmes5.i586.rpm 36e0bdd3bbf5e634b55d4694380c84dc mes5/i586/cups-common-1.3.10-0.2mdvmes5.i586.rpm 00c15febde2ad95d12d7635661d47945 mes5/i586/cups-serial-1.3.10-0.2mdvmes5.i586.rpm f4df21360fd911b246a12c1848e53581 mes5/i586/libacl1-2.2.47-4.1mdvmes5.i586.rpm 8aea7eac71eac4b9149d80b4218af3c2 mes5/i586/libacl-devel-2.2.47-4.1mdvmes5.i586.rpm 2e9611bb9cefdb97750fe45670996543 mes5/i586/libcups2-1.3.10-0.2mdvmes5.i586.rpm 1303d2339e5f85a9051385c6c1477e3b mes5/i586/libcups2-devel-1.3.10-0.2mdvmes5.i586.rpm 5ffb04e2aeb3d81c715d321ca7f6493d mes5/i586/libopenslp1-1.2.1-8.1mdvmes5.i586.rpm 5de6f8ac79499f879c2595c91233bbf3 mes5/i586/libopenslp1-devel-1.2.1-8.1mdvmes5.i586.rpm 8bb39d8ce2ad2d4709918445815208fc mes5/i586/libpoppler3-0.8.7-2.3mdvmes5.i586.rpm 0e8f25804f2159b90fdd8e7095131588 mes5/i586/libpoppler-devel-0.8.7-2.3mdvmes5.i586.rpm 9ebc1e0b9b3c82859d739493a858cae9 mes5/i586/libpoppler-glib3-0.8.7-2.3mdvmes5.i586.rpm 51e64a439af77b2312767f7d644a6a4f mes5/i586/libpoppler-glib-devel-0.8.7-2.3mdvmes5.i586.rpm 7c704efde4af7a2a210b5bccd2fedea2 mes5/i586/libpoppler-qt2-0.8.7-2.3mdvmes5.i586.rpm ebfbf333cc37cb01a069228b6f4239b9 mes5/i586/libpoppler-qt4-3-0.8.7-2.3mdvmes5.i586.rpm 308efdd8971843a2d2d62e5259deb313 mes5/i586/libpoppler-qt4-devel-0.8.7-2.3mdvmes5.i586.rpm b8ef53aed48f4495abbda78f967c6b03 mes5/i586/libpoppler-qt-devel-0.8.7-2.3mdvmes5.i586.rpm 41dbe03f2d9348e06e3ba8e3d1f26cc9 mes5/i586/openslp-1.2.1-8.1mdvmes5.i586.rpm 4a30887d3b5cfbe996f6216dfd2af9de mes5/i586/php-cups-1.3.10-0.2mdvmes5.i586.rpm e99f800df740a1104f2e55e454dba0e2 mes5/i586/poppler-0.8.7-2.3mdvmes5.i586.rpm 635e5f08f9bd9bcf938c7e6acc2bcd40 mes5/SRPMS/acl-2.2.47-4.1mdvmes5.src.rpm 45443396fd1b86d7d305d203f058d4f6 mes5/SRPMS/cups-1.3.10-0.2mdvmes5.src.rpm 3f7d68de39f4e1eed0c6095db6c69837 mes5/SRPMS/openslp-1.2.1-8.1mdvmes5.src.rpm 6b77ace4f59963baf78a0ba041070cfe mes5/SRPMS/poppler-0.8.7-2.3mdvmes5.src.rpm Mandriva Enterprise Server 5/X86_64: 3d95d16026af177290e0cea353da380c mes5/x86_64/acl-2.2.47-4.1mdvmes5.x86_64.rpm cb71f3f8b76b599d72fa15930ead4194 mes5/x86_64/cups-1.3.10-0.2mdvmes5.x86_64.rpm c3580a98d4248e4746d1021800916675 mes5/x86_64/cups-common-1.3.10-0.2mdvmes5.x86_64.rpm 39c78f07835385585189c4c984eeb86c mes5/x86_64/cups-serial-1.3.10-0.2mdvmes5.x86_64.rpm b78b05598b1ddd50a0d5ffc1e63a9d5f mes5/x86_64/lib64acl1-2.2.47-4.1mdvmes5.x86_64.rpm 10eb04184447f9a76052a4c57d99f7ab mes5/x86_64/lib64acl-devel-2.2.47-4.1mdvmes5.x86_64.rpm 0696874c98c99972866e26d90ee38d6f mes5/x86_64/lib64cups2-1.3.10-0.2mdvmes5.x86_64.rpm 4bd0ea0f775617400ce40b1c4f957603 mes5/x86_64/lib64cups2-devel-1.3.10-0.2mdvmes5.x86_64.rpm 7e545a67886d3a94f173b84531694cca mes5/x86_64/lib64openslp1-1.2.1-8.1mdvmes5.x86_64.rpm a084b392e3db81f7f7ba9886dc745a67 mes5/x86_64/lib64openslp1-devel-1.2.1-8.1mdvmes5.x86_64.rpm a91173c222b22c42775e545bcd728a74 mes5/x86_64/lib64poppler3-0.8.7-2.3mdvmes5.x86_64.rpm 8b3196f11e5acded6268e8a3e5e2a855 mes5/x86_64/lib64poppler-devel-0.8.7-2.3mdvmes5.x86_64.rpm d805bec2817b0479c45aa54fe36a4c06 mes5/x86_64/lib64poppler-glib3-0.8.7-2.3mdvmes5.x86_64.rpm a5385b959453bfe0cd9f86083866dc18 mes5/x86_64/lib64poppler-glib-devel-0.8.7-2.3mdvmes5.x86_64.rpm 36bd4a56b2e0e681433f37bd06a10a81 mes5/x86_64/lib64poppler-qt2-0.8.7-2.3mdvmes5.x86_64.rpm 237b15170b5066ac55f8a8b4327b80bb mes5/x86_64/lib64poppler-qt4-3-0.8.7-2.3mdvmes5.x86_64.rpm 06c3a86abdac6e1eeda86f916fe06026 mes5/x86_64/lib64poppler-qt4-devel-0.8.7-2.3mdvmes5.x86_64.rpm b5b086ecfbe4629ef2ab3d2d5472d655 mes5/x86_64/lib64poppler-qt-devel-0.8.7-2.3mdvmes5.x86_64.rpm 790c7f128775137459a5d406ddc05c8b mes5/x86_64/openslp-1.2.1-8.1mdvmes5.x86_64.rpm f21671c76a063dfd784ef9afa363777e mes5/x86_64/php-cups-1.3.10-0.2mdvmes5.x86_64.rpm 39d5d335a1564962ac7868c53a2cb2a5 mes5/x86_64/poppler-0.8.7-2.3mdvmes5.x86_64.rpm 635e5f08f9bd9bcf938c7e6acc2bcd40 mes5/SRPMS/acl-2.2.47-4.1mdvmes5.src.rpm 45443396fd1b86d7d305d203f058d4f6 mes5/SRPMS/cups-1.3.10-0.2mdvmes5.src.rpm 3f7d68de39f4e1eed0c6095db6c69837 mes5/SRPMS/openslp-1.2.1-8.1mdvmes5.src.rpm 6b77ace4f59963baf78a0ba041070cfe mes5/SRPMS/poppler-0.8.7-2.3mdvmes5.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iD8DBQFK3N0BmqjQ0CJFipgRAvcCAJ4hYpfRAN3/ki8VBji+B/PMrRZlUwCgqkiE kgmoMK5ov330kU4qfIGFxlM= =aISl -----END PGP SIGNATURE-----

Trust: 2.52

sources: NVD: CVE-2009-0791 // JVNDB: JVNDB-2009-001734 // BID: 35195 // VULHUB: VHN-38237 // VULMON: CVE-2009-0791 // PACKETSTORM: 83975 // PACKETSTORM: 82086 // PACKETSTORM: 82088 // PACKETSTORM: 83707 // PACKETSTORM: 82087

AFFECTED PRODUCTS

vendor:applemodel:cupsscope:eqversion:1.1.22

Trust: 1.6

vendor:applemodel:cupsscope:eqversion:1.1.17

Trust: 1.6

vendor:applemodel:cupsscope:eqversion:1.3.7

Trust: 1.6

vendor:cupsmodel:cupsscope:eqversion:1.1.17

Trust: 0.8

vendor:cupsmodel:cupsscope:eqversion:1.1.22

Trust: 0.8

vendor:cupsmodel:cupsscope:eqversion:1.3.7

Trust: 0.8

vendor:cybertrustmodel:asianux serverscope:eqversion:2.0

Trust: 0.8

vendor:cybertrustmodel:asianux serverscope:eqversion:2.1

Trust: 0.8

vendor:cybertrustmodel:asianux serverscope:eqversion:3 (x86)

Trust: 0.8

vendor:cybertrustmodel:asianux serverscope:eqversion:3 (x86-64)

Trust: 0.8

vendor:cybertrustmodel:asianux serverscope:eqversion:3.0

Trust: 0.8

vendor:cybertrustmodel:asianux serverscope:eqversion:3.0 (x86-64)

Trust: 0.8

vendor:cybertrustmodel:asianux serverscope:eqversion:4.0

Trust: 0.8

vendor:cybertrustmodel:asianux serverscope:eqversion:4.0 (x86-64)

Trust: 0.8

vendor:red hatmodel:enterprise linuxscope:eqversion:3 (as)

Trust: 0.8

vendor:red hatmodel:enterprise linuxscope:eqversion:3 (es)

Trust: 0.8

vendor:red hatmodel:enterprise linuxscope:eqversion:3 (ws)

Trust: 0.8

vendor:red hatmodel:enterprise linuxscope:eqversion:4 (as)

Trust: 0.8

vendor:red hatmodel:enterprise linuxscope:eqversion:4 (es)

Trust: 0.8

vendor:red hatmodel:enterprise linuxscope:eqversion:4 (ws)

Trust: 0.8

vendor:red hatmodel:enterprise linuxscope:eqversion:4.8 (as)

Trust: 0.8

vendor:red hatmodel:enterprise linuxscope:eqversion:4.8 (es)

Trust: 0.8

vendor:red hatmodel:enterprise linuxscope:eqversion:5 (server)

Trust: 0.8

vendor:red hatmodel:enterprise linux desktopscope:eqversion:3.0

Trust: 0.8

vendor:red hatmodel:enterprise linux desktopscope:eqversion:4.0

Trust: 0.8

vendor:red hatmodel:enterprise linux desktopscope:eqversion:5.0 (client)

Trust: 0.8

vendor:red hatmodel:rhel desktop workstationscope:eqversion:5 (client)

Trust: 0.8

vendor:red hatmodel:rhel optional productivity applicationsscope:eqversion:5 (server)

Trust: 0.8

vendor:red hatmodel:rhel optional productivity applications eusscope:eqversion:5.4.z (server)

Trust: 0.8

vendor:susemodel:linux enterprise server sp3scope:eqversion:9

Trust: 0.3

vendor:susemodel:linux enterprise serverscope:eqversion:9

Trust: 0.3

vendor:susemodel:linux enterprise serverscope:eqversion:11

Trust: 0.3

vendor:susemodel:linux enterprise server sp3scope:eqversion:10

Trust: 0.3

vendor:susemodel:linux enterprise server sp2scope:eqversion:10

Trust: 0.3

vendor:susemodel:linux enterprise server sp1scope:eqversion:10

Trust: 0.3

vendor:susemodel:linux enterprise serverscope:eqversion:10

Trust: 0.3

vendor:susemodel:linux enterprise desktopscope:eqversion:11

Trust: 0.3

vendor:susemodel:linux enterprise desktop sp3scope:eqversion:10

Trust: 0.3

vendor:susemodel:linux enterprise desktop sp2scope:eqversion:10

Trust: 0.3

vendor:susemodel:linux enterprise desktop sp1scope:eqversion:10

Trust: 0.3

vendor:susemodel:linux enterprise desktopscope:eqversion:10

Trust: 0.3

vendor:susemodel:linux enterprisescope:eqversion:11

Trust: 0.3

vendor:susemodel:opensusescope:eqversion:10.3

Trust: 0.3

vendor:s u s emodel:opensusescope:eqversion:11.2

Trust: 0.3

vendor:s u s emodel:opensusescope:eqversion:11.1

Trust: 0.3

vendor:s u s emodel:opensusescope:eqversion:11.0

Trust: 0.3

vendor:redhatmodel:enterprise linux wsscope:eqversion:4

Trust: 0.3

vendor:redhatmodel:enterprise linux wsscope:eqversion:3

Trust: 0.3

vendor:redhatmodel:enterprise linux optional productivity application serverscope:eqversion:5

Trust: 0.3

vendor:redhatmodel:enterprise linux esscope:eqversion:4

Trust: 0.3

vendor:redhatmodel:enterprise linux esscope:eqversion:3

Trust: 0.3

vendor:redhatmodel:enterprise linux desktop workstation clientscope:eqversion:5

Trust: 0.3

vendor:redhatmodel:enterprise linux desktop versionscope:eqversion:4

Trust: 0.3

vendor:redhatmodel:desktopscope:eqversion:4.0

Trust: 0.3

vendor:redhatmodel:desktopscope:eqversion:3.0

Trust: 0.3

vendor:redmodel:hat enterprise linux desktop clientscope:eqversion:5

Trust: 0.3

vendor:redmodel:hat enterprise linux asscope:eqversion:4

Trust: 0.3

vendor:redmodel:hat enterprise linux asscope:eqversion:3

Trust: 0.3

vendor:redmodel:hat enterprise linux serverscope:eqversion:5

Trust: 0.3

vendor:mandrivamodel:linux mandrake x86 64scope:eqversion:2009.0

Trust: 0.3

vendor:mandrivamodel:linux mandrakescope:eqversion:2009.0

Trust: 0.3

vendor:mandrivamodel:linux mandrake x86 64scope:eqversion:2008.0

Trust: 0.3

vendor:mandrivamodel:linux mandrakescope:eqversion:2008.0

Trust: 0.3

vendor:mandrakesoftmodel:multi network firewallscope:eqversion:2.0

Trust: 0.3

vendor:mandrakesoftmodel:enterprise server x86 64scope:eqversion:5

Trust: 0.3

vendor:mandrakesoftmodel:enterprise serverscope:eqversion:5

Trust: 0.3

vendor:mandrakesoftmodel:corporate server x86 64scope:eqversion:4.0

Trust: 0.3

vendor:mandrakesoftmodel:corporate server x86 64scope:eqversion:3.0

Trust: 0.3

vendor:mandrakesoftmodel:corporate serverscope:eqversion:3.0

Trust: 0.3

vendor:mandrakesoftmodel:corporate serverscope:eqversion:4.0

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.5.9

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.5.8

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.5.7

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.5.6

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.5.5

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.5.4

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.5.3

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.5.2

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.5.1

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.5

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.4.3

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.4.2

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.4.1

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.4

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.3.2

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.3.1

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.3

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.2.3

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.2.2

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.2.1

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.2

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.1.5

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.1.4

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.1.3

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.1.2

Trust: 0.3

vendor:kdemodel:ascope:eqversion:3.1.1

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.1.1

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.1

Trust: 0.3

vendor:kdemodel:bscope:eqversion:3.0.5

Trust: 0.3

vendor:kdemodel:ascope:eqversion:3.0.5

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.0.5

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.0.4

Trust: 0.3

vendor:kdemodel:ascope:eqversion:3.0.3

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.0.3

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.0.2

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.0.1

Trust: 0.3

vendor:kdemodel:kdescope:eqversion:3.0

Trust: 0.3

vendor:easymodel:software products cupsscope:eqversion:1.1.22

Trust: 0.3

vendor:easymodel:software products cupsscope:eqversion:1.1.21

Trust: 0.3

vendor:easymodel:software products cupsscope:eqversion:1.1.20

Trust: 0.3

vendor:easymodel:software products cups rc5scope:eqversion:1.1.19

Trust: 0.3

vendor:easymodel:software products cupsscope:eqversion:1.1.19

Trust: 0.3

vendor:easymodel:software products cupsscope:eqversion:1.1.18

Trust: 0.3

vendor:easymodel:software products cupsscope:eqversion:1.1.17

Trust: 0.3

vendor:avayamodel:proactive contactscope:eqversion:4.1

Trust: 0.3

vendor:avayamodel:proactive contactscope:eqversion:4.0

Trust: 0.3

vendor:avayamodel:message networking mnscope:eqversion:3.1

Trust: 0.3

vendor:avayamodel:message networkingscope:eqversion:3.1

Trust: 0.3

vendor:avayamodel:message networkingscope: - version: -

Trust: 0.3

sources: BID: 35195 // CNNVD: CNNVD-200906-119 // JVNDB: JVNDB-2009-001734 // NVD: CVE-2009-0791

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2009-0791
value: MEDIUM

Trust: 1.0

NVD: CVE-2009-0791
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-200906-119
value: MEDIUM

Trust: 0.6

VULHUB: VHN-38237
value: MEDIUM

Trust: 0.1

VULMON: CVE-2009-0791
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2009-0791
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-38237
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-38237 // VULMON: CVE-2009-0791 // CNNVD: CNNVD-200906-119 // JVNDB: JVNDB-2009-001734 // NVD: CVE-2009-0791

PROBLEMTYPE DATA

problemtype:CWE-189

Trust: 1.9

sources: VULHUB: VHN-38237 // JVNDB: JVNDB-2009-001734 // NVD: CVE-2009-0791

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200906-119

TYPE

digital error

Trust: 0.6

sources: CNNVD: CNNVD-200906-119

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2009-001734

PATCH
title:kdegraphics-3.5.5-3.5AXS3url:https://tsn.miraclelinux.com/tsn_local/index.php?m=errata&a=detail&eid=766
Trust: 0.8
title:tetex-3.0-33.8.5.0.1.AXS3url:https://tsn.miraclelinux.com/tsn_local/index.php?m=errata&a=detail&eid=1040
Trust: 0.8
title:Top Pageurl:http://www.cups.org/
Trust: 0.8
title:1803url:http://www.miraclelinux.com/support/index.php?q=node/99&errata_id=1803
Trust: 0.8
title:2060url:http://www.miraclelinux.com/support/index.php?q=node/99&errata_id=2060
Trust: 0.8
title:1805url:http://www.miraclelinux.com/support/index.php?q=node/99&errata_id=1805
Trust: 0.8
title:1729url:http://www.miraclelinux.com/support/index.php?q=node/99&errata_id=1729
Trust: 0.8
title:2059url:http://www.miraclelinux.com/support/index.php?q=node/99&errata_id=2059
Trust: 0.8
title:RHSA-2010:0399url:https://rhn.redhat.com/errata/RHSA-2010-0399.html
Trust: 0.8
title:RHSA-2009:1503url:https://rhn.redhat.com/errata/RHSA-2009-1503.html
Trust: 0.8
title:RHSA-2010:0400url:https://rhn.redhat.com/errata/RHSA-2010-0400.html
Trust: 0.8
title:RHSA-2009:1500url:https://rhn.redhat.com/errata/RHSA-2009-1500.html
Trust: 0.8
title:RHSA-2010:0401url:https://rhn.redhat.com/errata/RHSA-2010-0401.html
Trust: 0.8
title:RHSA-2009:1501url:https://rhn.redhat.com/errata/RHSA-2009-1501.html
Trust: 0.8
title:RHSA-2009:1502url:https://rhn.redhat.com/errata/RHSA-2009-1502.html
Trust: 0.8
title:RHSA-2009:1512url:https://rhn.redhat.com/errata/RHSA-2009-1512.html
Trust: 0.8
title:RHSA-2009:1083url:https://rhn.redhat.com/errata/RHSA-2009-1083.html
Trust: 0.8
title:RHSA-2009:1512url:https://www.jp.redhat.com/support/errata/RHSA/RHSA-2009-1512J.html
Trust: 0.8
title:RHSA-2009:1083url:https://www.jp.redhat.com/support/errata/RHSA/RHSA-2009-1083J.html
Trust: 0.8
title:RHSA-2009:1503url:https://www.jp.redhat.com/support/errata/RHSA/RHSA-2009-1503J.html
Trust: 0.8
title:RHSA-2009:1500url:https://www.jp.redhat.com/support/errata/RHSA/RHSA-2009-1500J.html
Trust: 0.8
title:RHSA-2009:1501url:https://www.jp.redhat.com/support/errata/RHSA/RHSA-2009-1501J.html
Trust: 0.8
title:RHSA-2009:1502url:https://www.jp.redhat.com/support/errata/RHSA/RHSA-2009-1502J.html
Trust: 0.8
title:XPDF Fixes for digital error vulnerabilitiesurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=223675
Trust: 0.6
title:Red Hat: Important: cups security updateurl:https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20091083 - Security Advisory
Trust: 0.1
title:Debian CVElist Bug Report Logs: cupsys: CVE-2009-0791 integer overflow vulnerabilitiesurl:https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs&qid=22c7db924de15c5764c0ff045606eb1e
Trust: 0.1
title:Red Hat: Important: poppler security updateurl:https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20090480 - Security Advisory
Trust: 0.1
title:CVE-T4PDF
Table of contents
List of CVEs
List of Techniquesurl:https://github.com/0xCyberY/CVE-T4PDF 
Trust: 0.1
sources:
            
            
            VULMON: CVE-2009-0791 // 
            
            
            
            CNNVD: CNNVD-200906-119 // 
            
            
            
            JVNDB: JVNDB-2009-001734

EXTERNAL IDS
db:NVDid:CVE-2009-0791
Trust: 3.4
db:BIDid:35195
Trust: 2.9
db:SECUNIAid:35340
Trust: 2.6
db:SECTRACKid:1022326
Trust: 2.6
db:VUPENid:ADV-2009-1488
Trust: 2.6
db:SECUNIAid:37037
Trust: 1.8
db:SECUNIAid:35685
Trust: 1.8
db:SECUNIAid:37023
Trust: 1.8
db:SECUNIAid:37043
Trust: 1.8
db:SECUNIAid:37028
Trust: 1.8
db:SECUNIAid:37079
Trust: 1.8
db:SECUNIAid:37077
Trust: 1.8
db:VUPENid:ADV-2009-2928
Trust: 1.8
db:XFid:50941
Trust: 0.8
db:JVNDBid:JVNDB-2009-001734
Trust: 0.8
db:CNNVDid:CNNVD-200906-119
Trust: 0.6
db:PACKETSTORMid:83975
Trust: 0.2
db:VULHUBid:VHN-38237
Trust: 0.1
db:VULMONid:CVE-2009-0791
Trust: 0.1
db:PACKETSTORMid:82086
Trust: 0.1
db:PACKETSTORMid:82088
Trust: 0.1
db:PACKETSTORMid:83707
Trust: 0.1
db:PACKETSTORMid:82087
Trust: 0.1
sources:
            
            
            VULHUB: VHN-38237 // 
            
            
            
            VULMON: CVE-2009-0791 // 
            
            
            
            BID: 35195 // 
            
            
            
            PACKETSTORM: 83975 // 
            
            
            
            PACKETSTORM: 82086 // 
            
            
            
            PACKETSTORM: 82088 // 
            
            
            
            PACKETSTORM: 83707 // 
            
            
            
            PACKETSTORM: 82087 // 
            
            
            
            CNNVD: CNNVD-200906-119 // 
            
            
            
            JVNDB: JVNDB-2009-001734 // 
            
            
            
            NVD: CVE-2009-0791

REFERENCES
url:http://securitytracker.com/id?1022326
Trust: 2.6
url:http://www.securityfocus.com/bid/35195
Trust: 2.6
url:http://secunia.com/advisories/35340
Trust: 2.6
url:http://www.vupen.com/english/advisories/2009/1488
Trust: 2.6
url:https://bugzilla.redhat.com/show_bug.cgi?id=491840
Trust: 2.1
url:http://secunia.com/advisories/35685
Trust: 1.8
url:http://secunia.com/advisories/37023
Trust: 1.8
url:http://secunia.com/advisories/37028
Trust: 1.8
url:http://secunia.com/advisories/37037
Trust: 1.8
url:http://secunia.com/advisories/37043
Trust: 1.8
url:http://secunia.com/advisories/37077
Trust: 1.8
url:http://secunia.com/advisories/37079
Trust: 1.8
url:http://www.vupen.com/english/advisories/2009/2928
Trust: 1.8
url:http://www.mandriva.com/security/advisories?name=mdvsa-2009:334
Trust: 1.8
url:http://www.redhat.com/support/errata/rhsa-2009-1083.html
Trust: 1.8
url:https://rhn.redhat.com/errata/rhsa-2009-1500.html
Trust: 1.8
url:https://rhn.redhat.com/errata/rhsa-2009-1501.html
Trust: 1.8
url:https://rhn.redhat.com/errata/rhsa-2009-1502.html
Trust: 1.8
url:https://rhn.redhat.com/errata/rhsa-2009-1503.html
Trust: 1.8
url:https://rhn.redhat.com/errata/rhsa-2009-1512.html
Trust: 1.8
url:http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
Trust: 1.8
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/50941
Trust: 1.8
url:https://oval.cisecurity.org/repository/search/definition/oval%3aorg.mitre.oval%3adef%3a10534
Trust: 1.8
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0791
Trust: 1.3
url:http://xforce.iss.net/xforce/xfdb/50941
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2009-0791
Trust: 0.8
url:https://access.redhat.com/errata/rhsa-2009:1083
Trust: 0.7
url:https://access.redhat.com/errata/rhsa-2009:0480
Trust: 0.6
url:https://access.redhat.com/errata/rhsa-2009:1501
Trust: 0.6
url:https://access.redhat.com/errata/rhsa-2009:1500
Trust: 0.6
url:https://access.redhat.com/errata/rhsa-2010:0400
Trust: 0.6
url:https://access.redhat.com/errata/rhsa-2010:0401
Trust: 0.6
url:https://access.redhat.com/errata/rhsa-2009:1503
Trust: 0.6
url:https://access.redhat.com/errata/rhsa-2009:1502
Trust: 0.6
url:https://access.redhat.com/security/cve/cve-2009-0791
Trust: 0.6
url:https://access.redhat.com/errata/rhsa-2009:1512
Trust: 0.6
url:https://access.redhat.com/errata/rhsa-2010:0399
Trust: 0.6
url:https://nvd.nist.gov/vuln/detail/cve-2009-0791
Trust: 0.5
url:http://www.mandriva.com/security/
Trust: 0.5
url:http://www.mandriva.com/security/advisories
Trust: 0.5
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-3609
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2009-3609
Trust: 0.4
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-3608
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2009-3608
Trust: 0.4
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0147
Trust: 0.4
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0166
Trust: 0.4
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0146
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2009-0166
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2009-0147
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2009-0146
Trust: 0.4
url:http://support.avaya.com/elmodocs2/security/asa-2009-227.htm
Trust: 0.3
url:http://www.cups.org
Trust: 0.3
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0163
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2009-0163
Trust: 0.3
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0949
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2009-0949
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2009-0165
Trust: 0.2
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0165
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2009-1180
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2009-1179
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2009-1182
Trust: 0.2
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-1181
Trust: 0.2
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0800
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2009-0799
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2009-0195
Trust: 0.2
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0799
Trust: 0.2
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-1180
Trust: 0.2
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-1183
Trust: 0.2
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-1182
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2009-0800
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2009-1181
Trust: 0.2
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0195
Trust: 0.2
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-1179
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2009-1183
Trust: 0.2
url:https://cwe.mitre.org/data/definitions/189.html
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
url:https://github.com/0xcybery/cve-t4pdf
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-3605
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2009-3605
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-1196
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2009-1196
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0945
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-1709
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2009-1709
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2009-0945
Trust: 0.1
sources:
            
            
            VULHUB: VHN-38237 // 
            
            
            
            VULMON: CVE-2009-0791 // 
            
            
            
            BID: 35195 // 
            
            
            
            PACKETSTORM: 83975 // 
            
            
            
            PACKETSTORM: 82086 // 
            
            
            
            PACKETSTORM: 82088 // 
            
            
            
            PACKETSTORM: 83707 // 
            
            
            
            PACKETSTORM: 82087 // 
            
            
            
            CNNVD: CNNVD-200906-119 // 
            
            
            
            JVNDB: JVNDB-2009-001734 // 
            
            
            
            NVD: CVE-2009-0791

CREDITS
Jan Lieskovsky※ jlieskov@redhat.com
Trust: 0.6
sources:
            
            
            CNNVD: CNNVD-200906-119

SOURCES
db:VULHUBid:VHN-38237
db:VULMONid:CVE-2009-0791
db:BIDid:35195
db:PACKETSTORMid:83975
db:PACKETSTORMid:82086
db:PACKETSTORMid:82088
db:PACKETSTORMid:83707
db:PACKETSTORMid:82087
db:CNNVDid:CNNVD-200906-119
db:JVNDBid:JVNDB-2009-001734
db:NVDid:CVE-2009-0791

LAST UPDATE DATE
2026-08-28T20:20:14.796000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-38237date:2023-02-13T00:00:00
db:VULMONid:CVE-2009-0791date:2023-02-13T00:00:00
db:BIDid:35195date:2015-03-19T09:37:00
db:CNNVDid:CNNVD-200906-119date:2023-04-28T00:00:00
db:JVNDBid:JVNDB-2009-001734date:2010-05-26T00:00:00
db:NVDid:CVE-2009-0791date:2026-04-23T00:35:47.467

SOURCES RELEASE DATE
db:VULHUBid:VHN-38237date:2009-06-09T00:00:00
db:VULMONid:CVE-2009-0791date:2009-06-09T00:00:00
db:BIDid:35195date:2009-06-03T00:00:00
db:PACKETSTORMid:83975date:2009-12-17T21:54:15
db:PACKETSTORMid:82086date:2009-10-21T02:32:05
db:PACKETSTORMid:82088date:2009-10-21T03:01:09
db:PACKETSTORMid:83707date:2009-12-11T00:57:14
db:PACKETSTORMid:82087date:2009-10-21T02:57:54
db:CNNVDid:CNNVD-200906-119date:2009-06-09T00:00:00
db:JVNDBid:JVNDB-2009-001734date:2009-07-09T00:00:00
db:NVDid:CVE-2009-0791date:2009-06-09T17:30:00.267