Poppler@0.13.0 Security Vulnerabilities and Issues — Poppler@0.13.0 CVE List

Lucene search

FreedesktopPoppler0.13.0

4 matches found

CVE•added 2013/11/23 11:55 a.m.•58 views

CVE-2013-4474

Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service (crash) via format string specifiers in a destination filename.

5CVSS7.1AI score0.29757EPSS

CVE•added 2013/11/23 11:55 a.m.•56 views

CVE-2013-4473

Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a source filename.

7.5CVSS7.9AI score0.02273EPSS

CVE•added 2014/08/29 5:0 p.m.•55 views

CVE-2010-5110

DCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service (crash) via a crafted PDF file.

4.3CVSS6.4AI score0.00773EPSS

CVE•added 2014/01/26 1:55 a.m.•45 views

CVE-2013-7296

The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the correct specifier within a format string, which allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted PDF file.

5CVSS6.2AI score0.02482EPSS