PT-2013-5033 · Poppler+1 · Poppler+1

Daniel Kahn Gillmor · Publicado 2013-11-20 · Atualizado 2024-06-15 · CVE-2013-4474

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions poppler versions prior to 0.24.3

Description The issue is related to a format string vulnerability in the extractPages function. This vulnerability allows remote attackers to cause a denial of service, resulting in a crash, by including format string specifiers in a destination filename.

Recommendations For versions prior to 0.24.3, update to version 0.24.3 or later to resolve the issue.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-4474

DLA-1074-1

MGASA-2013-0332

OPENSUSE-SU-2024:10360-1

USN-2958-1

Produtos afetados

Ubuntu

Poppler

Referências · 45

• 🔥 https://exploit-db.com/exploits/38817 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8868 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4474 · Nota de Segurança
• https://ubuntu.com/security/CVE-2015-8868 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=11560 · Nota
• http://securityfocus.com/bid/63374 · Nota
• http://openwall.com/lists/oss-security/2013/10/29/1 · Nota
• https://suse.com/security/cve/CVE-2009-1181 · Nota
• https://suse.com/security/cve/CVE-2013-1789 · Nota
• https://ubuntu.com/security/notices/USN-2958-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4473 · Nota de Segurança
• https://bugs.freedesktop.org/show_bug.cgi?id=69434 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2013-0332 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-4474 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-2958-1 · Aviso do Fabricante