Lucene search

Veracode Vulnerability DatabaseVERACODE:23808

HistoryApr 10, 2020 - 12:36 a.m.

Denial Of Service (DoS)

2020-04-1000:36:51

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

JSON

xpdf is vulnerable to denial of service. Multiple integer overflow flaws were found in Xpdf. An attacker could create a malicious PDF file that would cause Xpdf to crash or, potentially, execute arbitrary code when opened.

CPENameOperatorVersion
xpdfeq2.02__11.el3
xpdfeq3.00__14.el4
xpdfeq2.02__14.el3
xpdfeq3.00__20.el4
xpdfeq3.00__16.el4
popplereq0.5.4__4.el5
popplereq0.5.4__4.1.el5
popplereq0.5.4__4.3.el5_1
kdegraphicseq3.3.1__13.el4
kdegraphicseq3.3.1__10.el4

Name	Operator	Version
xpdf	eq	2.02__11.el3
xpdf	eq	3.00__14.el4
xpdf	eq	2.02__14.el3
xpdf	eq	3.00__20.el4
xpdf	eq	3.00__16.el4
poppler	eq	0.5.4__4.el5
poppler	eq	0.5.4__4.1.el5
poppler	eq	0.5.4__4.3.el5_1
kdegraphics	eq	3.3.1__13.el4
kdegraphics	eq	3.3.1__10.el4

Rows per page:

1-10 of 861

References

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html

lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html

lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html

lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html

poppler.freedesktop.org/

secunia.com/advisories/37023

secunia.com/advisories/37028

secunia.com/advisories/37034

secunia.com/advisories/37037

secunia.com/advisories/37043

secunia.com/advisories/37051

secunia.com/advisories/37054

secunia.com/advisories/37061

secunia.com/advisories/37077

secunia.com/advisories/37079

secunia.com/advisories/37114

secunia.com/advisories/37159

secunia.com/advisories/39327

secunia.com/advisories/39938

securitytracker.com/id?1023029

sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1

sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1

www.debian.org/security/2010/dsa-2028

www.debian.org/security/2010/dsa-2050

www.mandriva.com/security/advisories?name=MDVSA-2009:287

www.mandriva.com/security/advisories?name=MDVSA-2009:334

www.mandriva.com/security/advisories?name=MDVSA-2011:175

www.redhat.com/security/updates/classification/#important

www.redhat.com/support/errata/RHSA-2010-0755.html

www.securityfocus.com/bid/36703

www.ubuntu.com/usn/USN-850-1

www.ubuntu.com/usn/USN-850-3

www.vupen.com/english/advisories/2009/2924

www.vupen.com/english/advisories/2009/2925

www.vupen.com/english/advisories/2009/2926

www.vupen.com/english/advisories/2009/2928

www.vupen.com/english/advisories/2010/0802

www.vupen.com/english/advisories/2010/1220

access.redhat.com/errata/RHSA-2009:1500

access.redhat.com/errata/RHSA-2009:1501

access.redhat.com/errata/RHSA-2009:1502

access.redhat.com/errata/RHSA-2009:1503

access.redhat.com/errata/RHSA-2009:1504

access.redhat.com/errata/RHSA-2009:1512

access.redhat.com/errata/RHSA-2009:1513

access.redhat.com/errata/RHSA-2010:0399

access.redhat.com/errata/RHSA-2010:0400

access.redhat.com/errata/RHSA-2010:0401

access.redhat.com/errata/RHSA-2010:0755

access.redhat.com/security/cve/CVE-2009-3609

bugzilla.redhat.com/show_bug.cgi?id=526893

exchange.xforce.ibmcloud.com/vulnerabilities/53800

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11043

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8134

rhn.redhat.com/errata/RHSA-2009-1500.html

rhn.redhat.com/errata/RHSA-2009-1501.html

rhn.redhat.com/errata/RHSA-2009-1502.html

rhn.redhat.com/errata/RHSA-2009-1503.html

rhn.redhat.com/errata/RHSA-2009-1504.html

rhn.redhat.com/errata/RHSA-2009-1512.html

rhn.redhat.com/errata/RHSA-2009-1513.html

www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html

www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

JSON

Related for VERACODE:23808