Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation. The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent...

CVE-2010-3703

CVE-2010-3703 affects Poppler’s PDF parser (PostScriptFunction::PostScriptFunction in Function.cc) with affected versions including 0.8.7 up to 0.15.1 (and possibly related products). The vulnerability arises from an uninitialized pointer dereference, allowing context-dependent attackers to crash...

CVE-2010-3702

The CVE-2010-3702 issue affects the Xpdf PDF parser (Gfx::getPos) in Xpdf

CVE-2010-3702

The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service crash via unknown vectors that trigger an uninitialized pointer...

CVE-2010-3702

The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service crash via unknown vectors that trigger an uninitialized pointer...

Ubuntu Update for poppler vulnerabilities USN-1005-1

Ubuntu Update for Linux kernel vulnerabilities USN-1005-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10051.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for poppler vulnerabilities USN-1005-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Fedora Update for poppler FEDORA-2010-15981

Check for the Version of poppler OpenVAS Vulnerability Test Fedora Update for poppler FEDORA-2010-15981 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for poppler FEDORA-2010-15911

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for poppler FEDORA-2010-15911

Check for the Version of poppler OpenVAS Vulnerability Test Fedora Update for poppler FEDORA-2010-15911 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Ubuntu: Security Advisory (USN-1005-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for poppler FEDORA-2010-15981

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 13 : poppler-0.12.4-6.fc13 (2010-15911)

Thu Oct 7 2010 Marek Kasik - 0.12.4-6 - Add poppler-0.12.4-CVE-2010-3702.patch Properly initialize parser - Add poppler-0.12.4-CVE-2010-3703.patch Properly initialize stack - Add poppler-0.12.4-CVE-2010-3704.patch Fix crash in broken pdf code - 0.12.4-5 - Accept 4-digit values in ToUnicode CMaps...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS / 10.10 : poppler vulnerabilities (USN-1005-1)

It was discovered that poppler contained multiple security issues when parsing malformed PDF documents. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the progra...

Fedora 12 : poppler-0.12.4-5.fc12 (2010-15981)

Thu Oct 7 2010 Marek Kasik - 0.12.4-5 - Add poppler-0.12.4-CVE-2010-3702.patch Properly initialize parser - Add poppler-0.12.4-CVE-2010-3703.patch Properly initialize stack - Add poppler-0.12.4-CVE-2010-3704.patch Fix crash in broken pdf code - 0.12.4-4 - Accept 4-digit values in ToUnicode CMaps...

USN-1005-1: poppler vulnerabilities

It was discovered that poppler contained multiple security issues when parsing malformed PDF documents. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the progra...

[SECURITY] Fedora 13 Update: poppler-0.12.4-6.fc13

Poppler, a PDF rendering library, is a fork of the xpdf PDF viewer developed by Derek Noonburg of Glyph and Cog, LLC...

RedHat Update for poppler RHSA-2010:0749-01

Check for the Version of poppler OpenVAS Vulnerability Test RedHat Update for poppler RHSA-2010:0749-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora 14 : poppler-0.14.4-1.fc14 (2010-15857)

Bug 595245 - CVE-2010-3702 xpdf: uninitialized Gfx::parser pointer dereference - Bug 638960 - CVE-2010-3704 xpdf: array indexing error in FoFiType1::parse - Bug 639356 - CVE-2010-3703 poppler: use of initialized pointer in PostScriptFunction Note that Tenable Network Security has extracted the...

[SECURITY] Fedora 14 Update: poppler-0.14.4-1.fc14

Poppler, a PDF rendering library, is a fork of the xpdf PDF viewer developed by Derek Noonburg of Glyph and Cog, LLC...

Debian DSA-2119-1 : poppler - several vulnerabilities

Joel Voss of Leviathan Security Group discovered two vulnerabilities in the Poppler PDF rendering library, which may lead to the execution of arbitrary code if a malformed PDF file is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...