CVE-2010-3703
Description
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference.
Risk Information
Base Score
6.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
1.136
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Poppler update (ELSA-2024-2979) poppler-20.11.0-11.el8.i686.rpm | Linux |
| Poppler update (ELSA-2024-2979) poppler-20.11.0-11.el8.x86_64.rpm | Linux |
| Poppler-glib update (ELSA-2024-2979) poppler-glib-20.11.0-11.el8.i686.rpm | Linux |
| Poppler-glib update (ELSA-2024-2979) poppler-glib-20.11.0-11.el8.x86_64.rpm | Linux |
| Poppler-qt5 update (ELSA-2024-2979) poppler-qt5-20.11.0-11.el8.i686.rpm | Linux |
| Poppler-qt5 update (ELSA-2024-2979) poppler-qt5-20.11.0-11.el8.x86_64.rpm | Linux |
| Poppler-utils update (ELSA-2024-2979) poppler-utils-20.11.0-11.el8.x86_64.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234