CVE-2010-0207 In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (application crash) in xpdf-based PDF viewers.
MediumCVSS 5.5
EPSS 0.85%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (application crash) in xpdf-based PDF viewers.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/poppler(Debian:12) | < 0.16.3-1 | 0.16.3-1 |
| debian/poppler(Debian:13) | < 0.16.3-1 | 0.16.3-1 |
| debian/poppler(Debian:14) | < 0.16.3-1 | 0.16.3-1 |
| debian/xpdf(Debian:12) | All versions | No fix listed |
| debian/xpdf(Debian:12) | = 3.04+git20220601-1 | No fix listed |
| debian/xpdf(Debian:12) | = 3.04+git20231213-1 | No fix listed |
| debian/xpdf(Debian:12) | = 3.04+git20240118-1 | No fix listed |
| debian/xpdf(Debian:12) | = 3.04+git20240124-1 | No fix listed |
| debian/xpdf(Debian:12) | = 3.04+git20240202-1 | No fix listed |
| debian/xpdf(Debian:12) | = 3.04+git20240613-1 | No fix listed |
| debian/xpdf(Debian:12) | = 3.04+git20250103-1 | No fix listed |
| debian/xpdf(Debian:12) | = 3.04+git20250304-1 | No fix listed |
| debian/xpdf(Debian:12) | = 3.04+git20260220-1 | No fix listed |
| debian/xpdf(Debian:12) | = 3.04+git20260802-1 | No fix listed |
| debian/xpdf(Debian:13) | All versions | No fix listed |
| debian/xpdf(Debian:13) | = 3.04+git20250304-1 | No fix listed |
| debian/xpdf(Debian:13) | = 3.04+git20260220-1 | No fix listed |
| debian/xpdf(Debian:13) | = 3.04+git20260802-1 | No fix listed |
| debian/xpdf(Debian:14) | All versions | No fix listed |
| debian/xpdf(Debian:14) | = 3.04+git20250304-1 | No fix listed |
| debian/xpdf(Debian:14) | = 3.04+git20260220-1 | No fix listed |
| debian/xpdf(Debian:14) | = 3.04+git20260802-1 | No fix listed |
| xpdfreader xpdf | = 3.03-17 | No fix listed |
| xpdfreader xpdf | = 3.04-4 | No fix listed |
| xpdfreader xpdf | = 3.04-13 | No fix listed |
Show 1 more
| Product | Affected versions | Fixed in |
|---|---|---|
| poppler | = 0.26.5-2 | No fix listed |
References
- Debian Security Tracker CVE-2010-0207 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory