Denial of Service Vulnerability in xpdf PDF Viewer by Xpdf
CVE-2010-0207

5.5MEDIUM

Key Information:

Vendor

Poppler

Status
Poppler
Vendor
CVE Published:
30 October 2019

What is CVE-2010-0207?

The vulnerability in xpdf arises from a flaw in handling the xref table, leading to an infinite loop that can be exploited by remote attackers. This may result in a denial of service, causing xpdf-based PDF viewers to crash. End-users may experience significant disruptions in service due to this issue, making it imperative to apply fixes or updates promptly. Maintaining an updated version of xpdf is crucial to mitigating threats stemming from this vulnerability.

Affected Version(s)

poppler 0.26.5-2

References

https://security-tracker.debian.org/tracker/CVE-2010-0207
x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0207
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.