Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2010-3704HistoryNov 05, 2010 - 6:00 p.m.
CVE-2010-3704
2010-11-0518:00:00
Debian Security Bug Tracker
security-tracker.debian.org
28
0.006 Low
EPSS
Percentile
77.7%
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | poppler | < 0.12.4-1.2 | poppler_0.12.4-1.2_all.deb |
| Debian | 11 | all | poppler | < 0.12.4-1.2 | poppler_0.12.4-1.2_all.deb |
| Debian | 10 | all | poppler | < 0.12.4-1.2 | poppler_0.12.4-1.2_all.deb |
| Debian | 999 | all | poppler | < 0.12.4-1.2 | poppler_0.12.4-1.2_all.deb |
| Debian | 13 | all | poppler | < 0.12.4-1.2 | poppler_0.12.4-1.2_all.deb |
| Debian | 12 | all | xpdf | < 3.02-9 | xpdf_3.02-9_all.deb |
| Debian | 11 | all | xpdf | < 3.02-9 | xpdf_3.02-9_all.deb |
| Debian | 10 | all | xpdf | < 3.02-9 | xpdf_3.02-9_all.deb |
| Debian | 999 | all | xpdf | < 3.02-9 | xpdf_3.02-9_all.deb |
| Debian | 13 | all | xpdf | < 3.02-9 | xpdf_3.02-9_all.deb |
Related
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:48:43
ubuntucve
ubuntucve
CVE-2010-3704
2010-10-13 00:00:00
cve
cve
CVE-2010-3704
2010-11-05 18:00:00
prion
prion
Memory corruption
2010-11-05 18:00:00
nessus
nessus
Scientific Linux Security Update : xpdf on SL3.x, SL4.x i386/x86_64
2012-08-01 00:00:00
Fedora 13 : xpdf-3.02-16.fc13 (2010-16662)
2010-11-05 00:00:00
Debian DSA-2119-1 : poppler - several vulnerabilities
2010-10-14 00:00:00
openvas
openvas
Debian Security Advisory DSA 2116-1 (poppler)
2010-11-17 00:00:00
RedHat Update for kdegraphics RHSA-2010:0753-01
2010-10-19 00:00:00
CentOS Update for xpdf CESA-2010:0751 centos4 i386
2010-10-19 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package poppler5 version 0.12.4-alt0.M51.2
2010-10-14 00:00:00
Security fix for the ALT Linux 5 package kdegraphics version 3.5.10-alt6
2010-10-14 00:00:00
centos
centos
xpdf security update
2010-10-09 22:08:57
kdegraphics security update
2010-10-09 22:16:28
poppler security update
2010-10-10 22:51:57
oraclelinux
oraclelinux
xpdf security update
2010-10-07 00:00:00
poppler security update
2010-10-07 00:00:00
gpdf security update
2010-10-07 00:00:00
redhat
redhat
(RHSA-2010:0752) Important: gpdf security update
2010-10-07 00:00:00
(RHSA-2010:0751) Important: xpdf security update
2010-10-07 00:00:00
(RHSA-2010:0753) Important: kdegraphics security update
2010-10-07 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: xpdf-3.02-16.fc12
2010-11-04 23:47:08
[SECURITY] Fedora 13 Update: xpdf-3.02-16.fc13
2010-11-04 23:32:04
[SECURITY] Fedora 14 Update: xpdf-3.02-16.fc14
2010-11-04 23:29:40
debian
debian
[SECURITY] [DSA 2116-1] New poppler packages fix several vulnerabilities
2010-10-12 19:31:50
[SECURITY] [DSA 2135-1] New xpdf packages fix several vulnerabilities
2010-12-21 17:34:51
securityvulns
securityvulns
[SECURITY] [DSA 2116-1] New poppler packages fix several vulnerabilities
2010-10-13 00:00:00
poppler library multiple security vulnerabilities
2010-10-13 00:00:00
osv
osv
xpdf - several vulnerabilities
2010-12-21 00:00:00
slackware
slackware
[slackware-security] poppler
2010-11-21 00:21:03
[slackware-security] xpdf
2010-11-21 00:20:46
gentoo
gentoo
Xpdf: User-assisted execution of arbitrary code
2014-02-17 00:00:00
Poppler: Multiple vulnerabilities
2013-10-06 00:00:00
ubuntu
ubuntu
poppler vulnerabilities
2010-10-19 00:00:00
freebsd
freebsd
openoffice.org -- Multiple vulnerabilities
2010-08-04 00:00:00