Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2013-7296

Опубликовано: 26 янв. 2014
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 5

Описание

The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the correct specifier within a format string, which allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted PDF file.

РелизСтатусПримечание
devel

not-affected

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [0.24.5-2ubuntu4.3]]
esm-infra/xenial

not-affected

lucid

ignored

end of life
precise

not-affected

quantal

ignored

end of life
raring

ignored

end of life
saucy

ignored

end of life
trusty

not-affected

0.24.5-2ubuntu4.3
trusty/esm

DNE

trusty was not-affected [0.24.5-2ubuntu4.3]

Показывать по

Ссылки на источники

EPSS

Процентиль: 85%
0.02482
Низкий

5 Medium

CVSS2

Связанные уязвимости

redhat
почти 12 лет назад

The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the correct specifier within a format string, which allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted PDF file.

nvd
почти 12 лет назад

The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the correct specifier within a format string, which allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted PDF file.

debian
почти 12 лет назад

The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler befo ...

github
больше 3 лет назад

The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the correct specifier within a format string, which allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted PDF file.

EPSS

Процентиль: 85%
0.02482
Низкий

5 Medium

CVSS2

Уязвимость CVE-2013-7296