Heap-based buffer overflow in Xpdf 3.02pl2 and earlier CUPS 1.3.9 and probably other products allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.