Lucene search

K

Veracode Vulnerability DatabaseVERACODE:23904

HistoryApr 10, 2020 - 12:39 a.m.

Buffer Overflow

2020-04-1000:39:35

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

13

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

Poppler is vulnerable buffer overflows. Due to the flaw found in poppler, an attacker could create a malicious PDF file that would cause applications that use poppler (such as Evince) to crash or, potentially, execute arbitrary code when opened.

CPENameOperatorVersion
popplereq0.5.4__4.3.el5_1
popplereq0.5.4__4.1.el5
popplereq0.5.4__4.el5
popplereq0.5.4__4.3.el5_1
popplereq0.5.4__4.1.el5
popplereq0.5.4__4.el5

References

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html

lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html

lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html

lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html

poppler.freedesktop.org/

secunia.com/advisories/37034

secunia.com/advisories/37053

secunia.com/advisories/37054

secunia.com/advisories/37114

secunia.com/advisories/37159

secunia.com/advisories/39327

secunia.com/advisories/39938

securitytracker.com/id?1023029

sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1

sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1

www.debian.org/security/2010/dsa-2028

www.debian.org/security/2010/dsa-2050

www.mandriva.com/security/advisories?name=MDVSA-2009:287

www.mandriva.com/security/advisories?name=MDVSA-2010:087

www.mandriva.com/security/advisories?name=MDVSA-2011:175

www.redhat.com/security/updates/classification/#important

www.securityfocus.com/bid/36703

www.ubuntu.com/usn/USN-850-1

www.ubuntu.com/usn/USN-850-3

www.vupen.com/english/advisories/2009/2924

www.vupen.com/english/advisories/2009/2925

www.vupen.com/english/advisories/2010/0802

www.vupen.com/english/advisories/2010/1040

www.vupen.com/english/advisories/2010/1220

access.redhat.com/errata/RHSA-2009:1504

access.redhat.com/security/cve/CVE-2009-3603

bugzilla.redhat.com/show_bug.cgi?id=526915

exchange.xforce.ibmcloud.com/vulnerabilities/53793

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9671

rhn.redhat.com/errata/RHSA-2009-1504.html

www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html

www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

Related for VERACODE:23904

prion1 ubuntucve1 cve1 debiancve1 nessus26 redhat1 openvas49 oraclelinux1 centos1 securityvulns2 ubuntu2 slackware2 altlinux1 osv2 fedora7 debian2 gentoo1