CVE-2010-3703

2010-10-1300:00:00

ubuntu.com

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.011

Percentile

84.4%

JSON

The PostScriptFunction::PostScriptFunction function in poppler/Function.cc
in the PDF parser in poppler 0.8.7 and possibly other versions up to
0.15.1, and possibly other products, allows context-dependent attackers to
cause a denial of service (crash) via a PDF file that triggers an
uninitialized pointer dereference.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=599165>

Notes

Author	Note
mdeslaur	only affect poppler versions after b1d4efb082

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchipe< anyUNKNOWN
ubuntu20.04noarchipe< anyUNKNOWN
ubuntu22.04noarchipe< anyUNKNOWN
ubuntu24.04noarchipe< anyUNKNOWN
ubuntu16.04noarchipe< anyUNKNOWN
ubuntu9.10noarchpoppler< 0.12.0-0ubuntu2.3UNKNOWN
ubuntu10.04noarchpoppler< 0.12.4-0ubuntu5.1UNKNOWN
ubuntu10.10noarchpoppler< 0.14.3-0ubuntu1.1UNKNOWN
ubuntu9.10noarchxpdf< 3.02-1.4ubuntu2.9.10.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	ipe	< any	UNKNOWN
ubuntu	20.04	noarch	ipe	< any	UNKNOWN
ubuntu	22.04	noarch	ipe	< any	UNKNOWN
ubuntu	24.04	noarch	ipe	< any	UNKNOWN
ubuntu	16.04	noarch	ipe	< any	UNKNOWN
ubuntu	9.10	noarch	poppler	< 0.12.0-0ubuntu2.3	UNKNOWN
ubuntu	10.04	noarch	poppler	< 0.12.4-0ubuntu5.1	UNKNOWN
ubuntu	10.10	noarch	poppler	< 0.14.3-0ubuntu1.1	UNKNOWN
ubuntu	9.10	noarch	xpdf	< 3.02-1.4ubuntu2.9.10.2	UNKNOWN