Lucene search

[email protected]NVD:CVE-2013-4474

HistoryNov 23, 2013 - 11:55 a.m.

CVE-2013-4474

2013-11-2311:55:04

CWE-20

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.3 High

AI Score

Confidence

High

0.27 Low

EPSS

Percentile

96.8%

JSON

Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service (crash) via format string specifiers in a destination filename.

Affected configurations

NVD

Node

canonicalubuntu_linuxMatch12.04lts

canonicalubuntu_linuxMatch14.04lts

canonicalubuntu_linuxMatch15.10

Node

freedesktoppopplerRange≤0.24.1

freedesktoppopplerMatch0.1

freedesktoppopplerMatch0.1.1

freedesktoppopplerMatch0.1.2

freedesktoppopplerMatch0.2.0

freedesktoppopplerMatch0.3.0

freedesktoppopplerMatch0.3.1

freedesktoppopplerMatch0.3.2

freedesktoppopplerMatch0.3.3

freedesktoppopplerMatch0.4.0

freedesktoppopplerMatch0.4.1

freedesktoppopplerMatch0.4.2

freedesktoppopplerMatch0.4.3

freedesktoppopplerMatch0.4.4

freedesktoppopplerMatch0.5.0

freedesktoppopplerMatch0.5.1

freedesktoppopplerMatch0.5.2

freedesktoppopplerMatch0.5.3

freedesktoppopplerMatch0.5.4

freedesktoppopplerMatch0.5.9

freedesktoppopplerMatch0.5.90

freedesktoppopplerMatch0.5.91

freedesktoppopplerMatch0.6.0

freedesktoppopplerMatch0.6.1

freedesktoppopplerMatch0.6.2

freedesktoppopplerMatch0.6.3

freedesktoppopplerMatch0.6.4

freedesktoppopplerMatch0.7.0

freedesktoppopplerMatch0.7.1

freedesktoppopplerMatch0.7.2

freedesktoppopplerMatch0.7.3

freedesktoppopplerMatch0.8.0

freedesktoppopplerMatch0.8.1

freedesktoppopplerMatch0.8.2

freedesktoppopplerMatch0.8.3

freedesktoppopplerMatch0.8.4

freedesktoppopplerMatch0.8.5

freedesktoppopplerMatch0.8.6

freedesktoppopplerMatch0.8.7

freedesktoppopplerMatch0.9.0

freedesktoppopplerMatch0.9.1

freedesktoppopplerMatch0.9.2

freedesktoppopplerMatch0.9.3

freedesktoppopplerMatch0.10.0

freedesktoppopplerMatch0.10.1

freedesktoppopplerMatch0.10.2

freedesktoppopplerMatch0.10.3

freedesktoppopplerMatch0.10.4

freedesktoppopplerMatch0.10.5

freedesktoppopplerMatch0.10.6

freedesktoppopplerMatch0.10.7

freedesktoppopplerMatch0.11.0

freedesktoppopplerMatch0.11.1

freedesktoppopplerMatch0.11.2

freedesktoppopplerMatch0.11.3

freedesktoppopplerMatch0.12.0

freedesktoppopplerMatch0.12.1

freedesktoppopplerMatch0.12.2

freedesktoppopplerMatch0.12.3

freedesktoppopplerMatch0.12.4

freedesktoppopplerMatch0.13.0

freedesktoppopplerMatch0.13.1

freedesktoppopplerMatch0.13.2

freedesktoppopplerMatch0.13.3

freedesktoppopplerMatch0.13.4

freedesktoppopplerMatch0.14.0

freedesktoppopplerMatch0.14.1

freedesktoppopplerMatch0.14.2

freedesktoppopplerMatch0.14.3

freedesktoppopplerMatch0.14.4

freedesktoppopplerMatch0.14.5

freedesktoppopplerMatch0.15.0

freedesktoppopplerMatch0.15.1

freedesktoppopplerMatch0.15.2

freedesktoppopplerMatch0.15.3

freedesktoppopplerMatch0.16.0

freedesktoppopplerMatch0.16.1

freedesktoppopplerMatch0.16.2

freedesktoppopplerMatch0.16.3

freedesktoppopplerMatch0.16.4

freedesktoppopplerMatch0.16.5

freedesktoppopplerMatch0.16.6

freedesktoppopplerMatch0.16.7

freedesktoppopplerMatch0.17.0

freedesktoppopplerMatch0.17.1

freedesktoppopplerMatch0.17.2

freedesktoppopplerMatch0.17.3

freedesktoppopplerMatch0.17.4

freedesktoppopplerMatch0.18.0

freedesktoppopplerMatch0.18.1

freedesktoppopplerMatch0.18.2

freedesktoppopplerMatch0.18.3

freedesktoppopplerMatch0.18.4

freedesktoppopplerMatch0.19.0

freedesktoppopplerMatch0.19.1

freedesktoppopplerMatch0.19.2

freedesktoppopplerMatch0.19.3

freedesktoppopplerMatch0.19.4

freedesktoppopplerMatch0.20.0

freedesktoppopplerMatch0.20.1

freedesktoppopplerMatch0.20.2

freedesktoppopplerMatch0.20.3

freedesktoppopplerMatch0.20.4

freedesktoppopplerMatch0.20.5

freedesktoppopplerMatch0.21.0

freedesktoppopplerMatch0.21.1

freedesktoppopplerMatch0.21.2

freedesktoppopplerMatch0.21.3

freedesktoppopplerMatch0.21.4

freedesktoppopplerMatch0.22.0

freedesktoppopplerMatch0.22.1

freedesktoppopplerMatch0.22.2

freedesktoppopplerMatch0.22.3

freedesktoppopplerMatch0.22.4

freedesktoppopplerMatch0.23.0

freedesktoppopplerMatch0.23.1

freedesktoppopplerMatch0.23.2

freedesktoppopplerMatch0.23.3

freedesktoppopplerMatch0.23.4

freedesktoppopplerMatch0.24.0

References

bugs.debian.org/723124

cgit.freedesktop.org/poppler/poppler/commit/?id=61f79b8447c3ac8ab5a26e79e0c28053ffdccf75

secunia.com/advisories/56567

security.gentoo.org/glsa/glsa-201401-21.xml

www.openwall.com/lists/oss-security/2013/10/29/1

www.securityfocus.com/bid/63374

www.ubuntu.com/usn/USN-2958-1

bugs.freedesktop.org/show_bug.cgi?id=69434

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.3 High

AI Score

Confidence

High

0.27 Low

EPSS

Percentile

96.8%

JSON

Related for NVD:CVE-2013-4474

cvelist1 ubuntucve1 cve1 debiancve1 prion1 openvas8 nessus6 fedora2 securityvulns2 mageia1 ubuntu1 gentoo1 debian1 osv1