PT-2010-4120 · Kde · Okular

Vincent Danen · Published 2010-08-30 · Updated 2018-10-10 · CVE-2010-2575

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Okular versions 4.3.0 through 4.5.0

Description The issue is related to a heap-based buffer overflow in the RLE decompression functionality within the TranscribePalmImageToJPEG function, located in generators/plucker/inplug/image.cpp. This can be triggered by remote attackers sending a crafted image in a PDB file, potentially leading to a denial of service (application crash) or possibly the execution of arbitrary code.

Recommendations For Okular versions 4.3.0 through 4.5.0, consider disabling the TranscribePalmImageToJPEG function until a patch is available to prevent potential exploitation. Restrict access to PDB files from untrusted sources to minimize the risk of denial of service or code execution.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-2575

Affected Products

Okular

References · 26

• http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.340142 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046524.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046542.html · Vendor Advisory
• http://vupen.com/english/advisories/2010/2178 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html · Vendor Advisory
• http://vupen.com/english/advisories/2010/2179 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-2575 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2010:162 · Vendor Advisory
• http://ubuntu.com/usn/USN-979-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-2575 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2575 · Security Note
• http://secunia.com/secunia_research/2010-109 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046448.html · Vendor Advisory
• http://kde.org/info/security/advisory-20100825-1.txt · Vendor Advisory
• http://secunia.com/advisories/40952 · Vendor Advisory