Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-2950

Опубликовано: 07 июл. 2008
Источник: nvd
CVSS2: 7.5
EPSS Средний

Описание

The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*
Версия до 0.8.4 (включая)

EPSS

Процентиль: 94%
0.12435
Средний

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

ubuntu
около 17 лет назад

The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document.

redhat
около 17 лет назад

The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document.

debian
около 17 лет назад

The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earl ...

github
больше 3 лет назад

The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document.

EPSS

Процентиль: 94%
0.12435
Средний

7.5 High

CVSS2

Дефекты

CWE-94