NetSight
IP …
high7.5

CVE-2010-3702

The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly othe…

Impact

The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference.

Affected products

VendorProductAffected versions
AppleCups
through 1.3.11
FreedesktopPoppler
from 0.8.7 through 0.15.1
XpdfreaderXpdf
through 3.01
Version 3.02
FedoraprojectFedora
Versions 12, 13, 14
OpensuseOpensuse
Versions 11.1, 11.2, 11.3
SuseLinux Enterprise Server
Versions 9, 10, 11
DebianDebian Linux
Versions 5.0, 6.0
RedhatEnterprise Linux Desktop
Version 5.0
RedhatEnterprise Linux Server
Version 5.0
RedhatEnterprise Linux Workstation
Version 5.0
CanonicalUbuntu Linux
Versions 6.06, 8.04, 9.04, 9.10, 10.04, 10.10

Weakness classification

CWE-476

References