CVE-2012-2142 The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.
HighCVSS 7.8
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/poppler(Debian:12) | < 0.18.4-7 | 0.18.4-7 |
| debian/poppler(Debian:13) | < 0.18.4-7 | 0.18.4-7 |
| debian/poppler(Debian:14) | < 0.18.4-7 | 0.18.4-7 |
| poppler | = before 0.21.4 | No fix listed |
| freedesktop poppler | < 0.21.4 | 0.21.4 |
| xpdfreader xpdf | = 3.02 | No fix listed |
| redhat enterprise linux | = 5.0 | No fix listed |
| redhat enterprise linux | = 6.0 | No fix listed |
| opensuse | = 12.2 | No fix listed |
References
- Debian Security Tracker CVE-2012-2142 vendor-advisory
- www.openwall.com exploit mailing-list third-party-advisory
- www.openwall.com exploit mailing-list third-party-advisory
- cgit.freedesktop.org patch vendor-advisory
- cgit.freedesktop.org patch vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- lists.opensuse.org mailing-list patch third-party-advisory
- bugs.debian.org issue-tracking