okular vulnerability

2010-08-2700:00:00

ubuntu.com

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

0.06

Percentile

93.5%

JSON

Releases

Ubuntu 10.04
Ubuntu 9.10
Ubuntu 9.04

Packages

kdegraphics - graphics applications from the official KDE 4 release

Details

Stefan Cornelius of Secunia Research discovered a boundary error during
RLE decompression in the “TranscribePalmImageToJPEG()” function in
generators/plucker/inplug/image.cpp of okular when processing images
embedded in PDB files, which can be exploited to cause a heap-based
buffer overflow. (CVE-2010-2575)

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchokular< 4:4.3.2-0ubuntu1.1UNKNOWN
Ubuntu9.10noarchgwenview< 4:4.3.2-0ubuntu1.1UNKNOWN
Ubuntu9.10noarchkamera< 4:4.3.2-0ubuntu1.1UNKNOWN
Ubuntu9.10noarchkcolorchooser< 4:4.3.2-0ubuntu1.1UNKNOWN
Ubuntu9.10noarchkdegraphics-dbg< 4:4.3.2-0ubuntu1.1UNKNOWN
Ubuntu9.10noarchkdegraphics-strigi-plugins< 4:4.3.2-0ubuntu1.1UNKNOWN
Ubuntu9.10noarchkgamma< 4:4.3.2-0ubuntu1.1UNKNOWN
Ubuntu9.10noarchkolourpaint4< 4:4.3.2-0ubuntu1.1UNKNOWN
Ubuntu9.10noarchkruler< 4:4.3.2-0ubuntu1.1UNKNOWN
Ubuntu9.10noarchksnapshot< 4:4.3.2-0ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	9.10	noarch	okular	< 4:4.3.2-0ubuntu1.1	UNKNOWN
Ubuntu	9.10	noarch	gwenview	< 4:4.3.2-0ubuntu1.1	UNKNOWN
Ubuntu	9.10	noarch	kamera	< 4:4.3.2-0ubuntu1.1	UNKNOWN
Ubuntu	9.10	noarch	kcolorchooser	< 4:4.3.2-0ubuntu1.1	UNKNOWN
Ubuntu	9.10	noarch	kdegraphics-dbg	< 4:4.3.2-0ubuntu1.1	UNKNOWN
Ubuntu	9.10	noarch	kdegraphics-strigi-plugins	< 4:4.3.2-0ubuntu1.1	UNKNOWN
Ubuntu	9.10	noarch	kgamma	< 4:4.3.2-0ubuntu1.1	UNKNOWN
Ubuntu	9.10	noarch	kolourpaint4	< 4:4.3.2-0ubuntu1.1	UNKNOWN
Ubuntu	9.10	noarch	kruler	< 4:4.3.2-0ubuntu1.1	UNKNOWN
Ubuntu	9.10	noarch	ksnapshot	< 4:4.3.2-0ubuntu1.1	UNKNOWN