Lucene search

[email protected]NVD:CVE-2013-4473

HistoryNov 23, 2013 - 11:55 a.m.

CVE-2013-4473

2013-11-2311:55:04

CWE-119

[email protected]

web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

High

0.064 Low

EPSS

Percentile

93.7%

JSON

Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a source filename.

Affected configurations

NVD

Node

freedesktoppopplerRange≤0.24.1

freedesktoppopplerMatch0.1

freedesktoppopplerMatch0.1.1

freedesktoppopplerMatch0.1.2

freedesktoppopplerMatch0.2.0

freedesktoppopplerMatch0.3.0

freedesktoppopplerMatch0.3.1

freedesktoppopplerMatch0.3.2

freedesktoppopplerMatch0.3.3

freedesktoppopplerMatch0.4.0

freedesktoppopplerMatch0.4.1

freedesktoppopplerMatch0.4.2

freedesktoppopplerMatch0.4.3

freedesktoppopplerMatch0.4.4

freedesktoppopplerMatch0.5.0

freedesktoppopplerMatch0.5.1

freedesktoppopplerMatch0.5.2

freedesktoppopplerMatch0.5.3

freedesktoppopplerMatch0.5.4

freedesktoppopplerMatch0.5.9

freedesktoppopplerMatch0.5.90

freedesktoppopplerMatch0.5.91

freedesktoppopplerMatch0.6.0

freedesktoppopplerMatch0.6.1

freedesktoppopplerMatch0.6.2

freedesktoppopplerMatch0.6.3

freedesktoppopplerMatch0.6.4

freedesktoppopplerMatch0.7.0

freedesktoppopplerMatch0.7.1

freedesktoppopplerMatch0.7.2

freedesktoppopplerMatch0.7.3

freedesktoppopplerMatch0.8.0

freedesktoppopplerMatch0.8.1

freedesktoppopplerMatch0.8.2

freedesktoppopplerMatch0.8.3

freedesktoppopplerMatch0.8.4

freedesktoppopplerMatch0.8.5

freedesktoppopplerMatch0.8.6

freedesktoppopplerMatch0.8.7

freedesktoppopplerMatch0.9.0

freedesktoppopplerMatch0.9.1

freedesktoppopplerMatch0.9.2

freedesktoppopplerMatch0.9.3

freedesktoppopplerMatch0.10.0

freedesktoppopplerMatch0.10.1

freedesktoppopplerMatch0.10.2

freedesktoppopplerMatch0.10.3

freedesktoppopplerMatch0.10.4

freedesktoppopplerMatch0.10.5

freedesktoppopplerMatch0.10.6

freedesktoppopplerMatch0.10.7

freedesktoppopplerMatch0.11.0

freedesktoppopplerMatch0.11.1

freedesktoppopplerMatch0.11.2

freedesktoppopplerMatch0.11.3

freedesktoppopplerMatch0.12.0

freedesktoppopplerMatch0.12.1

freedesktoppopplerMatch0.12.2

freedesktoppopplerMatch0.12.3

freedesktoppopplerMatch0.12.4

freedesktoppopplerMatch0.13.0

freedesktoppopplerMatch0.13.1

freedesktoppopplerMatch0.13.2

freedesktoppopplerMatch0.13.3

freedesktoppopplerMatch0.13.4

freedesktoppopplerMatch0.14.0

freedesktoppopplerMatch0.14.1

freedesktoppopplerMatch0.14.2

freedesktoppopplerMatch0.14.3

freedesktoppopplerMatch0.14.4

freedesktoppopplerMatch0.14.5

freedesktoppopplerMatch0.15.0

freedesktoppopplerMatch0.15.1

freedesktoppopplerMatch0.15.2

freedesktoppopplerMatch0.15.3

freedesktoppopplerMatch0.16.0

freedesktoppopplerMatch0.16.1

freedesktoppopplerMatch0.16.2

freedesktoppopplerMatch0.16.3

freedesktoppopplerMatch0.16.4

freedesktoppopplerMatch0.16.5

freedesktoppopplerMatch0.16.6

freedesktoppopplerMatch0.16.7

freedesktoppopplerMatch0.17.0

freedesktoppopplerMatch0.17.1

freedesktoppopplerMatch0.17.2

freedesktoppopplerMatch0.17.3

freedesktoppopplerMatch0.17.4

freedesktoppopplerMatch0.18.0

freedesktoppopplerMatch0.18.1

freedesktoppopplerMatch0.18.2

freedesktoppopplerMatch0.18.3

freedesktoppopplerMatch0.18.4

freedesktoppopplerMatch0.19.0

freedesktoppopplerMatch0.19.1

freedesktoppopplerMatch0.19.2

freedesktoppopplerMatch0.19.3

freedesktoppopplerMatch0.19.4

freedesktoppopplerMatch0.20.0

freedesktoppopplerMatch0.20.1

freedesktoppopplerMatch0.20.2

freedesktoppopplerMatch0.20.3

freedesktoppopplerMatch0.20.4

freedesktoppopplerMatch0.20.5

freedesktoppopplerMatch0.21.0

freedesktoppopplerMatch0.21.1

freedesktoppopplerMatch0.21.2

freedesktoppopplerMatch0.21.3

freedesktoppopplerMatch0.21.4

freedesktoppopplerMatch0.22.0

freedesktoppopplerMatch0.22.1

freedesktoppopplerMatch0.22.2

freedesktoppopplerMatch0.22.3

freedesktoppopplerMatch0.22.4

freedesktoppopplerMatch0.23.0

freedesktoppopplerMatch0.23.1

freedesktoppopplerMatch0.23.2

freedesktoppopplerMatch0.23.3

freedesktoppopplerMatch0.23.4

freedesktoppopplerMatch0.24.0

Node

canonicalubuntu_linuxMatch12.04lts

canonicalubuntu_linuxMatch14.04lts

canonicalubuntu_linuxMatch15.10

References

bugs.debian.org/723124

cgit.freedesktop.org/poppler/poppler/commit/utils/pdfseparate.cc?id=b8682d868ddf7f741e93b

cgit.freedesktop.org/poppler/poppler/tree/NEWS

secunia.com/advisories/56567

security.gentoo.org/glsa/glsa-201401-21.xml

www.openwall.com/lists/oss-security/2013/10/29/1

www.securityfocus.com/bid/63368

www.ubuntu.com/usn/USN-2958-1

bugs.freedesktop.org/show_bug.cgi?id=69434

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

High

0.064 Low

EPSS

Percentile

93.7%

JSON

Related for NVD:CVE-2013-4473

cve1 debiancve1 prion1 f52 ubuntucve1 cvelist1 nessus6 fedora2 securityvulns2 openvas8 mageia1 ubuntu1 gentoo1 debian1 osv1