Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-3702
HistoryOct 13, 2010 - 12:00 a.m.

CVE-2010-3702

2010-10-1300:00:00
ubuntu.com
ubuntu.com
26

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.2%

The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler
0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and
possibly other products allows context-dependent attackers to cause a
denial of service (crash) via unknown vectors that trigger an uninitialized
pointer dereference.

Bugs

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.2%