Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:23078
HistoryApr 10, 2020 - 12:15 a.m.

Arbitrary Code Execution

2020-04-1000:15:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON

poppler is vulnerable to arbitrary code execution. An integer overflow flaw in the processing of PDF files allows an attacker to create a malicious PDF file that would cause an application linked with poppler to crash or potentially execute arbitrary code when opened.

References

Related

nessus 64
openvas 68
prion 2
osv 7
altlinux 2
ubuntucve 1
debian 8
centos 8
debiancve 1
gentoo 4
securityvulns 2
redhat 6
freebsd 1
ubuntu 2
fedora 10
oraclelinux 8
slackware 3
cve 2
nessus
nessus
RHEL 4 : gpdf (RHSA-2007:0730)
2007-07-31 00:00:00
openSUSE 10 Security Update : libextractor (libextractor-4041)
2007-10-17 00:00:00
Ubuntu 6.06 LTS / 6.10 / 7.04 : poppler vulnerability (USN-496-2)
2007-11-10 00:00:00
openvas
openvas
Fedora Update for tetex FEDORA-2007-669
2009-02-27 00:00:00
Ubuntu Update for poppler vulnerability USN-496-2
2009-03-23 00:00:00
Slackware Advisory SSA:2007-222-02 poppler
2012-09-11 00:00:00
prion
prion
Integer overflow
2007-07-30 23:17:00
Design/Logic Flaw
2007-09-24 00:17:00
osv
osv
tetex-bin
2007-08-06 00:00:00
gpdf - integer overflow
2007-08-13 00:00:00
poppler
2007-08-04 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package xpdf version 3.02-alt2
2007-08-08 00:00:00
Security fix for the ALT Linux 5 package kdegraphics version 3.5.7-alt2
2007-08-08 00:00:00
ubuntucve
ubuntucve
CVE-2007-3387
2007-07-30 00:00:00
debian
debian
[SECURITY] [DSA 1347-1] New xpdf packages fix arbitrary code execution
2007-08-04 00:00:00
[SECURITY] [DSA 1355-1] New kdegraphics packages fix arbitrary code execution
2007-08-13 00:00:00
[SECURITY] [DSA 1354-1] New gpdf packages fix arbitrary code execution
2007-08-13 00:00:00
centos
centos
cups security update
2007-07-30 21:57:24
xpdf security update
2007-07-30 21:58:57
tetex security update
2007-08-01 12:52:26
debiancve
debiancve
CVE-2007-3387
2007-07-30 23:17:00
gentoo
gentoo
PDFKit, ImageKits: Buffer overflow
2007-10-18 00:00:00
KOffice, KWord, KPDF, KDE Graphics Libraries: Stack-based buffer overflow
2007-10-09 00:00:00
Poppler: Two buffer overflow vulnerabilities
2007-09-19 00:00:00
securityvulns
securityvulns
XPDF / KOffice integer overflow
2007-08-03 00:00:00
[USN-496-1] koffice vulnerability
2007-08-03 00:00:00
redhat
redhat
(RHSA-2007:0735) Important: xpdf security update
2007-07-30 00:00:00
(RHSA-2007:0732) Important: poppler security update
2007-07-30 00:00:00
(RHSA-2007:0730) Important: gpdf security update
2007-07-30 00:00:00
freebsd
freebsd
xpdf -- stack based buffer overflow
2007-07-30 00:00:00
ubuntu
ubuntu
koffice vulnerability
2007-08-03 00:00:00
poppler vulnerability
2007-08-07 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: koffice-1.6.3-9.fc7
2007-08-15 19:45:53
[SECURITY] Fedora Core 6 Update: tetex-3.0-35.fc6
2007-08-13 22:01:33
[SECURITY] Fedora 7 Update: tetex-3.0-40.1.fc7
2007-08-10 22:24:01
oraclelinux
oraclelinux
Important: tetex security update
2007-08-01 00:00:00
Important: kdegraphics security update
2007-07-30 00:00:00
Important: poppler security update
2007-07-30 00:00:00
slackware
slackware
[slackware-security] xpdf
2007-08-11 05:56:09
[slackware-security] poppler
2007-08-11 05:54:55
[slackware-security] xpdf/poppler/koffice/kdegraphics
2007-11-12 09:06:02
cve
cve
CVE-2007-3387
2007-07-30 23:17:00
CVE-2007-5049
2007-09-24 00:17:00

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON
Related for VERACODE:23078
nessus64openvas68prion2osv7altlinux2ubuntucve1debian8centos8debiancve1gentoo4securityvulns2redhat6freebsd1ubuntu2fedora10oraclelinux8slackware3cve2