Описание
The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 4 | tetex | Affected | ||
| Red Hat Enterprise Linux 3 | xpdf | Fixed | RHSA-2010:0750 | 07.10.2010 |
| Red Hat Enterprise Linux 3 | cups | Fixed | RHSA-2010:0754 | 07.10.2010 |
| Red Hat Enterprise Linux 4 | xpdf | Fixed | RHSA-2010:0751 | 07.10.2010 |
| Red Hat Enterprise Linux 4 | gpdf | Fixed | RHSA-2010:0752 | 07.10.2010 |
| Red Hat Enterprise Linux 4 | kdegraphics | Fixed | RHSA-2010:0753 | 07.10.2010 |
| Red Hat Enterprise Linux 4 | cups | Fixed | RHSA-2010:0755 | 07.10.2010 |
| Red Hat Enterprise Linux 5 | poppler | Fixed | RHSA-2010:0749 | 07.10.2010 |
| Red Hat Enterprise Linux 5 | kdegraphics | Fixed | RHSA-2010:0753 | 07.10.2010 |
| Red Hat Enterprise Linux 5 | tetex | Fixed | RHSA-2012:1201 | 23.08.2012 |
Показывать по
Дополнительная информация
Статус:
5.8 Medium
CVSS2
Связанные уязвимости
The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference.
The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference.
The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, pop ...
The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference.
Уязвимость операционной системы CentOS, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
5.8 Medium
CVSS2