[DLA 24-1] poppler security update

2014-07-3111:24:12

lists.debian.org

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.6 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

81.0%

JSON

Package : poppler
Version : 0.12.4-1.2+squeeze4
CVE ID : CVE-2010-5110
Debian Bug : 722705

It was discovered that poppler did return program execution to the
libjpeg library under error conditions, which is not expected by the
library and results in application crash and possibly code execution.
Attachment:
signature.asc
Description: This is a digitally signed message part.

OSVersionArchitecturePackageVersionFilename
Debian6amd64libpoppler-glib4< 0.12.4-1.2+squeeze4libpoppler-glib4_0.12.4-1.2+squeeze4_amd64.deb
Debian6i386libpoppler-glib4< 0.12.4-1.2+squeeze4libpoppler-glib4_0.12.4-1.2+squeeze4_i386.deb
Debian6amd64libpoppler-dev< 0.12.4-1.2+squeeze4libpoppler-dev_0.12.4-1.2+squeeze4_amd64.deb
Debian6i386libpoppler5< 0.12.4-1.2+squeeze4libpoppler5_0.12.4-1.2+squeeze4_i386.deb
Debian6i386libpoppler-qt2< 0.12.4-1.2+squeeze4libpoppler-qt2_0.12.4-1.2+squeeze4_i386.deb
Debian6amd64libpoppler-qt4-dev< 0.12.4-1.2+squeeze4libpoppler-qt4-dev_0.12.4-1.2+squeeze4_amd64.deb
Debian6amd64libpoppler-qt4-3< 0.12.4-1.2+squeeze4libpoppler-qt4-3_0.12.4-1.2+squeeze4_amd64.deb
Debian6i386libpoppler-glib-dev< 0.12.4-1.2+squeeze4libpoppler-glib-dev_0.12.4-1.2+squeeze4_i386.deb
Debian6i386libpoppler-qt-dev< 0.12.4-1.2+squeeze4libpoppler-qt-dev_0.12.4-1.2+squeeze4_i386.deb
Debian6i386poppler-utils< 0.12.4-1.2+squeeze4poppler-utils_0.12.4-1.2+squeeze4_i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	amd64	libpoppler-glib4	< 0.12.4-1.2+squeeze4	libpoppler-glib4_0.12.4-1.2+squeeze4_amd64.deb
Debian	6	i386	libpoppler-glib4	< 0.12.4-1.2+squeeze4	libpoppler-glib4_0.12.4-1.2+squeeze4_i386.deb
Debian	6	amd64	libpoppler-dev	< 0.12.4-1.2+squeeze4	libpoppler-dev_0.12.4-1.2+squeeze4_amd64.deb
Debian	6	i386	libpoppler5	< 0.12.4-1.2+squeeze4	libpoppler5_0.12.4-1.2+squeeze4_i386.deb
Debian	6	i386	libpoppler-qt2	< 0.12.4-1.2+squeeze4	libpoppler-qt2_0.12.4-1.2+squeeze4_i386.deb
Debian	6	amd64	libpoppler-qt4-dev	< 0.12.4-1.2+squeeze4	libpoppler-qt4-dev_0.12.4-1.2+squeeze4_amd64.deb
Debian	6	amd64	libpoppler-qt4-3	< 0.12.4-1.2+squeeze4	libpoppler-qt4-3_0.12.4-1.2+squeeze4_amd64.deb
Debian	6	i386	libpoppler-glib-dev	< 0.12.4-1.2+squeeze4	libpoppler-glib-dev_0.12.4-1.2+squeeze4_i386.deb
Debian	6	i386	libpoppler-qt-dev	< 0.12.4-1.2+squeeze4	libpoppler-qt-dev_0.12.4-1.2+squeeze4_i386.deb
Debian	6	i386	poppler-utils	< 0.12.4-1.2+squeeze4	poppler-utils_0.12.4-1.2+squeeze4_i386.deb