CVE-2013-1790

2013-02-2800:00:00

ubuntu.com

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

86.1%

JSON

poppler/Stream.cc in poppler before 0.22.1 allows context-dependent
attackers to have an unspecified impact via vectors that trigger a read of
uninitialized memory by the CCITTFaxStream::lookChar function.

Bugs

Notes

Author	Note
mdeslaur	reproducer is 1004.pdf.asan.7.3

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchpoppler< 0.12.4-0ubuntu5.3UNKNOWN
ubuntu11.10noarchpoppler< 0.16.7-2ubuntu2.1UNKNOWN
ubuntu12.04noarchpoppler< 0.18.4-1ubuntu3.1UNKNOWN
ubuntu12.10noarchpoppler< 0.20.4-0ubuntu1.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	poppler	< 0.12.4-0ubuntu5.3	UNKNOWN
ubuntu	11.10	noarch	poppler	< 0.16.7-2ubuntu2.1	UNKNOWN
ubuntu	12.04	noarch	poppler	< 0.18.4-1ubuntu3.1	UNKNOWN
ubuntu	12.10	noarch	poppler	< 0.20.4-0ubuntu1.2	UNKNOWN