Lucene search

K
ubuntuUbuntuUSN-2958-1
HistoryMay 02, 2016 - 12:00 a.m.

poppler vulnerabilities

2016-05-0200:00:00
ubuntu.com
32

8.4 High

AI Score

Confidence

High

0.306 Low

EPSS

Percentile

96.9%

Releases

  • Ubuntu 15.10
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04

Packages

  • poppler - PDF rendering library

Details

It was discovered that the poppler pdfseparate tool incorrectly handled
certain filenames. A local attacker could use this issue to cause the tool
to crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only applied to Ubuntu 12.04 LTS. (CVE-2013-4473,
CVE-2013-4474)

It was discovered that poppler incorrectly parsed certain malformed PDF
documents. If a user or automated system were tricked into opening a
crafted PDF file, an attacker could cause a denial of service or possibly
execute arbitrary code with privileges of the user invoking the program.
(CVE-2015-8868)