Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-1693
HistoryApr 18, 2008 - 3:05 p.m.

CVE-2008-1693

2008-04-1815:05:00
CWE-20
[email protected]
web.nvd.nist.gov
30
cve-2008-1693
cairofont::create
poppler
xpdf
evince
epdfview
kword
font object
pdf
arbitrary code
security vulnerability

7.2 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.131 Low

EPSS

Percentile

95.5%

JSON

The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, related to dereferencing a function pointer associated with the type of this font object.

References

Related

openvas 37
redhat 4
debian 2
nessus 29
debiancve 1
ubuntu 2
osv 2
oraclelinux 4
centos 4
seebug 1
veracode 1
gentoo 1
securityvulns 2
prion 1
ubuntucve 1
fedora 1
openvas
openvas
Debian Security Advisory DSA 1548-1 (xpdf)
2008-04-21 00:00:00
Ubuntu Update for poppler vulnerability USN-603-1
2009-03-23 00:00:00
Mandriva Update for koffice MDVSA-2008:197 (koffice)
2009-04-09 00:00:00
redhat
redhat
(RHSA-2008:0239) Important: poppler security update
2008-04-17 00:00:00
(RHSA-2008:0238) Important: kdegraphics security update
2008-04-17 00:00:00
(RHSA-2008:0262) Important: gpdf security update
2008-05-08 00:00:00
debian
debian
[SECURITY] [DSA 1548-1] New xpdf packages fix arbitrary code exitution
2008-04-17 17:08:44
[SECURITY] [DSA 1548-1] New xpdf packages fix arbitrary code exitution
2008-04-17 17:08:44
nessus
nessus
CentOS 4 : kdegraphics (CESA-2008:0238)
2008-04-22 00:00:00
Scientific Linux Security Update : xpdf on SL4.x i386/x86_64
2012-08-01 00:00:00
GLSA-200804-18 : Poppler: User-assisted execution of arbitrary code
2008-04-22 00:00:00
debiancve
debiancve
CVE-2008-1693
2008-04-18 15:05:00
ubuntu
ubuntu
KOffice vulnerability
2008-04-17 00:00:00
poppler vulnerability
2008-04-17 00:00:00
osv
osv
poppler - execution of arbitrary code
2008-07-09 00:00:00
xpdf
2008-04-17 00:00:00
oraclelinux
oraclelinux
kdegraphics security update
2008-04-17 00:00:00
xpdf security update
2008-04-17 00:00:00
poppler security update
2008-04-17 00:00:00
centos
centos
kdegraphics security update
2008-04-20 14:15:40
xpdf security update
2008-04-20 14:17:25
poppler security update
2008-04-21 15:50:27
seebug
seebug
XpdfๅตŒๅ…ฅๅญ—ไฝ“ๅค„็†ไปฃ็ ๆ‰ง่กŒๆผๆดž
2008-04-23 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:21:48
gentoo
gentoo
Poppler: User-assisted execution of arbitrary code
2008-04-17 00:00:00
securityvulns
securityvulns
[ GLSA 200804-18 ] Poppler: User-assisted execution of arbitrary code
2008-04-17 00:00:00
XPDF / Poppler uninitialized pointer dereference
2008-04-17 00:00:00
prion
prion
Design/Logic Flaw
2008-04-18 15:05:00
ubuntucve
ubuntucve
CVE-2008-1693
2008-04-18 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: poppler-0.5.4-9.fc7
2008-04-29 20:50:56

7.2 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.131 Low

EPSS

Percentile

95.5%

JSON
Related for CVE-2008-1693
openvas37redhat4debian2nessus29debiancve1ubuntu2osv2oraclelinux4centos4seebug1veracode1gentoo1securityvulns2prion1ubuntucve1fedora1