SUSE CVE-2010-3702

The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service crash via unknown vectors that trigger an uninitialized pointer...

The vulnerability of the Gfx::getPos function in PDF viewing software developed by Xpdf arises from a lack of input data validation mechanisms. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Gfx::getPos function in PDF viewing software like Xpdf is related to the lack of mechanisms for checking input data. Exploiting this vulnerability allows remote attackers to gain access to confidential data, compromise its integrity, and cause service failures...

xpdf: uninitialized Gfx::parser pointer dereference

The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service crash via unknown vectors that trigger an uninitialized pointer...