Denial of Service Vulnerability in Poppler PDF Parser
CVE-2010-3703

Currently unrated

Key Information:

Vendor: Poppler
Status: Poppler
Vendor: CVE Published:; 5 November 2010

What is CVE-2010-3703?

The Poppler PDF parser is susceptible to a denial of service attack due to an uninitialized pointer dereference in the PostScriptFunction::PostScriptFunction function. This vulnerability enables context-dependent attackers to crash applications that rely on Poppler for PDF processing when they process a maliciously crafted PDF file.

References

http://www.openwall.com/lists/oss-security/2010/10/04/6

mailing-listx_refsource_MLIST

http://lists.fedoraproject.org/pipermail/package-announce...

vendor-advisoryx_refsource_FEDORA

http://www.redhat.com/support/errata/RHSA-2010-0859.html

vendor-advisoryx_refsource_REDHAT

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 5, 2010
Vulnerability Reserved
Oct 1, 2010

CVE-2010-3703 Data

JSON