CVE-2010-3704 The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows con...
MediumCVSS 6.8
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| poppler | = 0.8.7 | No fix listed |
| poppler | = 0.9.0 | No fix listed |
| poppler | = 0.9.1 | No fix listed |
| poppler | = 0.9.2 | No fix listed |
| poppler | = 0.9.3 | No fix listed |
| poppler | = 0.10.0 | No fix listed |
| poppler | = 0.10.1 | No fix listed |
| poppler | = 0.10.2 | No fix listed |
| poppler | = 0.10.3 | No fix listed |
| poppler | = 0.10.4 | No fix listed |
| poppler | = 0.10.5 | No fix listed |
| poppler | = 0.10.6 | No fix listed |
| poppler | = 0.10.7 | No fix listed |
| poppler | = 0.11.0 | No fix listed |
| poppler | = 0.11.1 | No fix listed |
| poppler | = 0.11.2 | No fix listed |
| poppler | = 0.11.3 | No fix listed |
| poppler | = 0.12.0 | No fix listed |
| poppler | = 0.12.1 | No fix listed |
| poppler | = 0.12.2 | No fix listed |
| poppler | = 0.12.3 | No fix listed |
| poppler | = 0.12.4 | No fix listed |
| poppler | = 0.13.0 | No fix listed |
| poppler | = 0.13.1 | No fix listed |
| poppler | = 0.13.2 | No fix listed |
Show 60 more
| Product | Affected versions | Fixed in |
|---|---|---|
| poppler | = 0.13.3 | No fix listed |
| poppler | = 0.13.4 | No fix listed |
| poppler | = 0.14.0 | No fix listed |
| poppler | = 0.14.1 | No fix listed |
| poppler | = 0.14.2 | No fix listed |
| poppler | = 0.14.3 | No fix listed |
| poppler | = 0.14.4 | No fix listed |
| poppler | = 0.14.5 | No fix listed |
| poppler | = 0.15.0 | No fix listed |
| poppler | = 0.15.1 | No fix listed |
| foolabs xpdf | = 0.5a | No fix listed |
| foolabs xpdf | = 0.7a | No fix listed |
| foolabs xpdf | = 0.91a | No fix listed |
| foolabs xpdf | = 0.91b | No fix listed |
| foolabs xpdf | = 0.91c | No fix listed |
| foolabs xpdf | = 0.92a | No fix listed |
| foolabs xpdf | = 0.92b | No fix listed |
| foolabs xpdf | = 0.92c | No fix listed |
| foolabs xpdf | = 0.92d | No fix listed |
| foolabs xpdf | = 0.92e | No fix listed |
| foolabs xpdf | = 0.93a | No fix listed |
| foolabs xpdf | = 0.93b | No fix listed |
| foolabs xpdf | = 0.93c | No fix listed |
| foolabs xpdf | = 1.00a | No fix listed |
| foolabs xpdf | = 3.0.1 | No fix listed |
| foolabs xpdf | = 3.02pl1 | No fix listed |
| foolabs xpdf | = 3.02pl2 | No fix listed |
| foolabs xpdf | = 3.02pl3 | No fix listed |
| glyphandcog xpdfreader | <= 3.02 | No fix listed |
| glyphandcog xpdfreader | = 0.2 | No fix listed |
| glyphandcog xpdfreader | = 0.3 | No fix listed |
| glyphandcog xpdfreader | = 0.4 | No fix listed |
| glyphandcog xpdfreader | = 0.5 | No fix listed |
| glyphandcog xpdfreader | = 0.6 | No fix listed |
| glyphandcog xpdfreader | = 0.7 | No fix listed |
| glyphandcog xpdfreader | = 0.80 | No fix listed |
| glyphandcog xpdfreader | = 0.90 | No fix listed |
| glyphandcog xpdfreader | = 0.91 | No fix listed |
| glyphandcog xpdfreader | = 0.92 | No fix listed |
| glyphandcog xpdfreader | = 0.93 | No fix listed |
| glyphandcog xpdfreader | = 1.00 | No fix listed |
| glyphandcog xpdfreader | = 1.01 | No fix listed |
| glyphandcog xpdfreader | = 2.00 | No fix listed |
| glyphandcog xpdfreader | = 2.01 | No fix listed |
| glyphandcog xpdfreader | = 2.02 | No fix listed |
| glyphandcog xpdfreader | = 2.03 | No fix listed |
| glyphandcog xpdfreader | = 3.00 | No fix listed |
| glyphandcog xpdfreader | = 3.01 | No fix listed |
| glyphandcog xpdfreader | = 3.02 | No fix listed |
| kdegraphics | All versions | No fix listed |
| debian/poppler(Debian:12) | < 0.12.4-1.2 | 0.12.4-1.2 |
| debian/poppler(Debian:13) | < 0.12.4-1.2 | 0.12.4-1.2 |
| debian/poppler(Debian:14) | < 0.12.4-1.2 | 0.12.4-1.2 |
| debian/xpdf(Debian:12) | < 3.02-9 | 3.02-9 |
| debian/xpdf(Debian:13) | < 3.02-9 | 3.02-9 |
| debian/xpdf(Debian:14) | < 3.02-9 | 3.02-9 |
| ubuntu/ipe(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/ipe(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/ipe(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/ipe(Ubuntu:22.04) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-1005-1 vendor-advisory
- www.cve.org
- cgit.freedesktop.org patch
- FEDORA-2010-16744 vendor-advisory
- FEDORA-2010-16662 vendor-advisory
- FEDORA-2010-16705 vendor-advisory
- FEDORA-2010-15857 vendor-advisory
- FEDORA-2010-15911 vendor-advisory
- FEDORA-2010-15981 vendor-advisory
- SUSE-SR:2010:022 vendor-advisory
- SUSE-SR:2010:024 vendor-advisory
- RHSA-2012:1201 vendor-advisory
- 42141 third-party-advisory
- 42357 third-party-advisory
- 42397 third-party-advisory
- 42691 third-party-advisory
- 43079 third-party-advisory
- SSA:2010-324-01 vendor-advisory
- DSA-2119 vendor-advisory
- DSA-2135 vendor-advisory
- MDVSA-2010:228 vendor-advisory
- MDVSA-2010:229 vendor-advisory
- MDVSA-2010:230 vendor-advisory
- MDVSA-2010:231 vendor-advisory
- MDVSA-2012:144 vendor-advisory
- www.openoffice.org
- [oss-security] 20101004 Re: CVE requests: Poppler, Quassel, Pyfribidi, Overkill, DocUtils, FireGPG, Wireshark mailing-list
- RHSA-2010:0749 vendor-advisory
- RHSA-2010:0751 vendor-advisory
- RHSA-2010:0752 vendor-advisory
- RHSA-2010:0753 vendor-advisory
- RHSA-2010:0859 vendor-advisory
- 43841 vdb-entry
- USN-1005-1 vendor-advisory
- ADV-2010-2897 vdb-entry
- ADV-2010-3097 vdb-entry
- ADV-2011-0230 vdb-entry
- bugzilla.redhat.com
- Debian Security Tracker CVE-2010-3704 vendor-advisory
- bugs.debian.org issue-tracking