Lucene search

Veracode Vulnerability DatabaseVERACODE:23865

HistoryApr 10, 2020 - 12:38 a.m.

Arbitrary Code Execution

2020-04-1000:38:29

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

JSON

xpdf is vulnerable to arbitrary code execution. The vulnerability exists as multiple integer overflow flaws were found in Xpdf. An attacker could create a malicious PDF file that would cause Xpdf to crash or, potentially, execute arbitrary code when opened.

CPENameOperatorVersion
xpdfeq3.00__14.el4
xpdfeq3.00__20.el4
xpdfeq3.00__16.el4
popplereq0.5.4__4.3.el5_1
popplereq0.5.4__4.1.el5
popplereq0.5.4__4.el5
kdegraphicseq3.5.4__8.el5
kdegraphicseq3.5.4__12.el5_3
kdegraphicseq3.3.1__13.el4
kdegraphicseq3.3.1__10.el4

Name	Operator	Version
xpdf	eq	3.00__14.el4
xpdf	eq	3.00__20.el4
xpdf	eq	3.00__16.el4
poppler	eq	0.5.4__4.3.el5_1
poppler	eq	0.5.4__4.1.el5
poppler	eq	0.5.4__4.el5
kdegraphics	eq	3.5.4__8.el5
kdegraphics	eq	3.5.4__12.el5_3
kdegraphics	eq	3.3.1__13.el4
kdegraphics	eq	3.3.1__10.el4

Rows per page:

1-10 of 681

References

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html

lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html

lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html

lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html

poppler.freedesktop.org/

secunia.com/advisories/37028

secunia.com/advisories/37034

secunia.com/advisories/37037

secunia.com/advisories/37043

secunia.com/advisories/37051

secunia.com/advisories/37053

secunia.com/advisories/37054

secunia.com/advisories/37061

secunia.com/advisories/37077

secunia.com/advisories/37079

secunia.com/advisories/37114

secunia.com/advisories/37159

secunia.com/advisories/39327

secunia.com/advisories/39938

securitytracker.com/id?1023029

sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1

sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1

www.debian.org/security/2009/dsa-1941

www.debian.org/security/2010/dsa-2028

www.debian.org/security/2010/dsa-2050

www.mandriva.com/security/advisories?name=MDVSA-2009:287

www.mandriva.com/security/advisories?name=MDVSA-2009:334

www.mandriva.com/security/advisories?name=MDVSA-2011:175

www.ocert.org/advisories/ocert-2009-016.html

www.openwall.com/lists/oss-security/2009/12/01/1

www.openwall.com/lists/oss-security/2009/12/01/5

www.openwall.com/lists/oss-security/2009/12/01/6

www.redhat.com/security/updates/classification/#important

www.securityfocus.com/bid/36703

www.ubuntu.com/usn/USN-850-1

www.ubuntu.com/usn/USN-850-3

www.vupen.com/english/advisories/2009/2924

www.vupen.com/english/advisories/2009/2925

www.vupen.com/english/advisories/2009/2926

www.vupen.com/english/advisories/2009/2928

www.vupen.com/english/advisories/2010/0802

www.vupen.com/english/advisories/2010/1220

access.redhat.com/errata/RHSA-2009:1501

access.redhat.com/errata/RHSA-2009:1502

access.redhat.com/errata/RHSA-2009:1503

access.redhat.com/errata/RHSA-2009:1504

access.redhat.com/errata/RHSA-2009:1512

access.redhat.com/errata/RHSA-2009:1513

access.redhat.com/errata/RHSA-2010:0400

access.redhat.com/security/cve/CVE-2009-3608

bugzilla.redhat.com/show_bug.cgi?id=526637

exchange.xforce.ibmcloud.com/vulnerabilities/53794

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9536

rhn.redhat.com/errata/RHSA-2009-1501.html

rhn.redhat.com/errata/RHSA-2009-1502.html

rhn.redhat.com/errata/RHSA-2009-1503.html

rhn.redhat.com/errata/RHSA-2009-1504.html

rhn.redhat.com/errata/RHSA-2009-1512.html

rhn.redhat.com/errata/RHSA-2009-1513.html

www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html

www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

JSON

Related for VERACODE:23865