CVE-2010-3702
Published: 13 October 2010
The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
gpdf
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| dapper |
Ignored
(end of life)
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
| hardy |
Does not exist
|
|
| hirsute |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| jaunty |
Does not exist
|
|
| karmic |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lucid |
Does not exist
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| maverick |
Does not exist
|
|
| natty |
Does not exist
|
|
| noble |
Does not exist
|
|
| oneiric |
Does not exist
|
|
| precise |
Does not exist
|
|
| quantal |
Does not exist
|
|
| raring |
Does not exist
|
|
| saucy |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| utopic |
Does not exist
|
|
| vivid |
Does not exist
|
|
| wily |
Does not exist
|
|
| xenial |
Does not exist
|
|
| yakkety |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
ipe
Launchpad, Ubuntu, Debian |
artful |
Ignored
(end of life)
|
| bionic |
Needs triage
|
|
| cosmic |
Ignored
(end of life)
|
|
| dapper |
Ignored
(end of life)
|
|
| disco |
Ignored
(end of life)
|
|
| eoan |
Ignored
(end of life)
|
|
| focal |
Needs triage
|
|
| groovy |
Ignored
(end of life)
|
|
| hardy |
Ignored
(end of life)
|
|
| hirsute |
Ignored
(end of life)
|
|
| impish |
Ignored
(end of life)
|
|
| jammy |
Needs triage
|
|
| jaunty |
Ignored
(end of life)
|
|
| karmic |
Ignored
(end of life)
|
|
| kinetic |
Ignored
(end of life, was needs-triage)
|
|
| lucid |
Ignored
(end of life)
|
|
| lunar |
Ignored
(end of life, was needs-triage)
|
|
| mantic |
Ignored
(end of life, was needs-triage)
|
|
| maverick |
Ignored
(end of life)
|
|
| natty |
Ignored
(end of life)
|
|
| noble |
Needs triage
|
|
| oneiric |
Ignored
(end of life)
|
|
| precise |
Ignored
(end of life)
|
|
| quantal |
Ignored
(end of life)
|
|
| raring |
Ignored
(end of life)
|
|
| saucy |
Ignored
(end of life)
|
|
| trusty |
Does not exist
(trusty was needs-triage)
|
|
| upstream |
Needs triage
|
|
| utopic |
Ignored
(end of life)
|
|
| vivid |
Ignored
(end of life)
|
|
| wily |
Ignored
(end of life)
|
|
| xenial |
Needs triage
|
|
| yakkety |
Ignored
(end of life)
|
|
| zesty |
Ignored
(end of life)
|
|
|
kdegraphics
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| dapper |
Not vulnerable
(linked to poppler)
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
| hardy |
Not vulnerable
(linked to poppler)
|
|
| hirsute |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| jaunty |
Not vulnerable
(linked to poppler)
|
|
| karmic |
Not vulnerable
(linked to poppler)
|
|
| kinetic |
Does not exist
|
|
| lucid |
Not vulnerable
(linked to poppler)
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| maverick |
Not vulnerable
(linked to poppler)
|
|
| natty |
Not vulnerable
(linked to poppler)
|
|
| noble |
Does not exist
|
|
| oneiric |
Does not exist
|
|
| precise |
Does not exist
|
|
| quantal |
Does not exist
|
|
| raring |
Does not exist
|
|
| saucy |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| utopic |
Does not exist
|
|
| vivid |
Does not exist
|
|
| wily |
Does not exist
|
|
| xenial |
Does not exist
|
|
| yakkety |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
koffice
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| dapper |
Ignored
(end of life)
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
| hardy |
Ignored
(end of life)
|
|
| hirsute |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| jaunty |
Ignored
(end of life)
|
|
| karmic |
Not vulnerable
(linked to poppler)
|
|
| kinetic |
Does not exist
|
|
| lucid |
Not vulnerable
(code not present)
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| maverick |
Not vulnerable
(code not present)
|
|
| natty |
Not vulnerable
(code not present)
|
|
| noble |
Does not exist
|
|
| oneiric |
Not vulnerable
(code not present)
|
|
| precise |
Does not exist
|
|
| quantal |
Does not exist
|
|
| raring |
Does not exist
|
|
| saucy |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| utopic |
Does not exist
|
|
| vivid |
Does not exist
|
|
| wily |
Does not exist
|
|
| xenial |
Does not exist
|
|
| yakkety |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
libextractor
Launchpad, Ubuntu, Debian |
artful |
Ignored
(end of life)
|
| bionic |
Not vulnerable
(does not use xpdf anymore)
|
|
| cosmic |
Ignored
(end of life)
|
|
| dapper |
Ignored
(end of life)
|
|
| disco |
Ignored
(end of life)
|
|
| eoan |
Ignored
(end of life)
|
|
| focal |
Not vulnerable
(does not use xpdf anymore)
|
|
| groovy |
Ignored
(end of life)
|
|
| hardy |
Ignored
(end of life)
|
|
| hirsute |
Ignored
(end of life)
|
|
| impish |
Ignored
(end of life)
|
|
| jammy |
Not vulnerable
(does not use xpdf anymore)
|
|
| jaunty |
Ignored
(end of life)
|
|
| karmic |
Ignored
(end of life)
|
|
| kinetic |
Not vulnerable
(does not use xpdf anymore)
|
|
| lucid |
Ignored
(end of life)
|
|
| lunar |
Not vulnerable
(does not use xpdf anymore)
|
|
| mantic |
Not vulnerable
(does not use xpdf anymore)
|
|
| maverick |
Ignored
(end of life)
|
|
| natty |
Ignored
(end of life)
|
|
| noble |
Not vulnerable
(does not use xpdf anymore)
|
|
| oneiric |
Ignored
(end of life)
|
|
| precise |
Ignored
(end of life)
|
|
| quantal |
Ignored
(end of life)
|
|
| raring |
Ignored
(end of life)
|
|
| saucy |
Ignored
(end of life)
|
|
| trusty |
Not vulnerable
(does not use xpdf anymore)
|
|
| upstream |
Needs triage
|
|
| utopic |
Ignored
(end of life)
|
|
| vivid |
Ignored
(end of life)
|
|
| wily |
Ignored
(end of life)
|
|
| xenial |
Not vulnerable
(does not use xpdf anymore)
|
|
| yakkety |
Ignored
(end of life)
|
|
| zesty |
Ignored
(end of life)
|
|
|
pdfkit.framework
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| dapper |
Ignored
(end of life)
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
| hardy |
Does not exist
|
|
| hirsute |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| jaunty |
Does not exist
|
|
| karmic |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lucid |
Does not exist
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| maverick |
Does not exist
|
|
| natty |
Does not exist
|
|
| noble |
Does not exist
|
|
| oneiric |
Does not exist
|
|
| precise |
Does not exist
|
|
| quantal |
Does not exist
|
|
| raring |
Does not exist
|
|
| saucy |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| utopic |
Does not exist
|
|
| vivid |
Does not exist
|
|
| wily |
Does not exist
|
|
| xenial |
Does not exist
|
|
| yakkety |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
pdftohtml
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| dapper |
Ignored
(end of life)
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
| hardy |
Does not exist
|
|
| hirsute |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| jaunty |
Does not exist
|
|
| karmic |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lucid |
Does not exist
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| maverick |
Does not exist
|
|
| natty |
Does not exist
|
|
| noble |
Does not exist
|
|
| oneiric |
Does not exist
|
|
| precise |
Does not exist
|
|
| quantal |
Does not exist
|
|
| raring |
Does not exist
|
|
| saucy |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| utopic |
Does not exist
|
|
| vivid |
Does not exist
|
|
| wily |
Does not exist
|
|
| xenial |
Does not exist
|
|
| yakkety |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
poppler
Launchpad, Ubuntu, Debian |
artful |
Not vulnerable
(0.16.0-0ubuntu2)
|
| bionic |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| cosmic |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| dapper |
Released
(0.5.1-0ubuntu7.8)
|
|
| disco |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| eoan |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| focal |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| groovy |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| hardy |
Released
(0.6.4-1ubuntu3.5)
|
|
| hirsute |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| impish |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| jammy |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| jaunty |
Released
(0.10.5-1ubuntu2.6)
|
|
| karmic |
Released
(0.12.0-0ubuntu2.3)
|
|
| kinetic |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| lucid |
Released
(0.12.4-0ubuntu5.1)
|
|
| lunar |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| mantic |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| maverick |
Released
(0.14.3-0ubuntu1.1)
|
|
| natty |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| noble |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| oneiric |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| precise |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| quantal |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| raring |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| saucy |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| trusty |
Does not exist
(trusty was not-affected [0.16.0-0ubuntu2])
|
|
| upstream |
Released
(0.14.4)
|
|
| utopic |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| vivid |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| wily |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| xenial |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| yakkety |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
| zesty |
Not vulnerable
(0.16.0-0ubuntu2)
|
|
|
Patches:
upstream: http://cgit.freedesktop.org/poppler/poppler/commit/?id=e853106b58d6b4b0467dbd6436c9bb1cfbd372cf |
||
|
tetex-bin
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| dapper |
Not vulnerable
(linked to poppler)
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
| hardy |
Does not exist
|
|
| hirsute |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| jaunty |
Does not exist
|
|
| karmic |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lucid |
Does not exist
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| maverick |
Does not exist
|
|
| natty |
Does not exist
|
|
| noble |
Does not exist
|
|
| oneiric |
Does not exist
|
|
| precise |
Does not exist
|
|
| quantal |
Does not exist
|
|
| raring |
Does not exist
|
|
| saucy |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| utopic |
Does not exist
|
|
| vivid |
Does not exist
|
|
| wily |
Does not exist
|
|
| xenial |
Does not exist
|
|
| yakkety |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
texlive-bin
Launchpad, Ubuntu, Debian |
artful |
Not vulnerable
(linked to poppler)
|
| bionic |
Not vulnerable
(linked to poppler)
|
|
| cosmic |
Not vulnerable
(linked to poppler)
|
|
| dapper |
Does not exist
|
|
| disco |
Not vulnerable
(linked to poppler)
|
|
| eoan |
Not vulnerable
(linked to poppler)
|
|
| focal |
Not vulnerable
(linked to poppler)
|
|
| groovy |
Not vulnerable
(linked to poppler)
|
|
| hardy |
Not vulnerable
(linked to poppler)
|
|
| hirsute |
Not vulnerable
(linked to poppler)
|
|
| impish |
Not vulnerable
(linked to poppler)
|
|
| jammy |
Not vulnerable
(linked to poppler)
|
|
| jaunty |
Not vulnerable
(linked to poppler)
|
|
| karmic |
Not vulnerable
(linked to poppler)
|
|
| kinetic |
Not vulnerable
(linked to poppler)
|
|
| lucid |
Not vulnerable
(linked to poppler)
|
|
| lunar |
Not vulnerable
(linked to poppler)
|
|
| mantic |
Not vulnerable
(linked to poppler)
|
|
| maverick |
Not vulnerable
(linked to poppler)
|
|
| natty |
Not vulnerable
(linked to poppler)
|
|
| noble |
Not vulnerable
(linked to poppler)
|
|
| oneiric |
Not vulnerable
(linked to poppler)
|
|
| precise |
Not vulnerable
(linked to poppler)
|
|
| quantal |
Not vulnerable
(linked to poppler)
|
|
| raring |
Not vulnerable
(linked to poppler)
|
|
| saucy |
Not vulnerable
(linked to poppler)
|
|
| trusty |
Does not exist
(trusty was not-affected [linked to poppler])
|
|
| upstream |
Needs triage
|
|
| utopic |
Not vulnerable
(linked to poppler)
|
|
| vivid |
Not vulnerable
(linked to poppler)
|
|
| wily |
Not vulnerable
(linked to poppler)
|
|
| xenial |
Not vulnerable
(linked to poppler)
|
|
| yakkety |
Not vulnerable
(linked to poppler)
|
|
| zesty |
Not vulnerable
(linked to poppler)
|
|
|
xpdf
Launchpad, Ubuntu, Debian |
artful |
Not vulnerable
(3.02-12ubuntu1)
|
| bionic |
Not vulnerable
(3.02-12ubuntu1)
|
|
| cosmic |
Not vulnerable
(3.02-12ubuntu1)
|
|
| dapper |
Ignored
(end of life)
|
|
| disco |
Not vulnerable
(3.02-12ubuntu1)
|
|
| eoan |
Not vulnerable
(3.02-12ubuntu1)
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
| hardy |
Ignored
(end of life)
|
|
| hirsute |
Not vulnerable
|
|
| impish |
Not vulnerable
|
|
| jammy |
Not vulnerable
|
|
| jaunty |
Ignored
(end of life)
|
|
| karmic |
Released
(3.02-1.4ubuntu2.9.10.2)
|
|
| kinetic |
Not vulnerable
|
|
| lucid |
Released
(3.02-2ubuntu1.1)
|
|
| lunar |
Not vulnerable
|
|
| mantic |
Not vulnerable
|
|
| maverick |
Released
(3.02-9ubuntu1.1)
|
|
| natty |
Not vulnerable
(3.02-12ubuntu1)
|
|
| noble |
Not vulnerable
|
|
| oneiric |
Not vulnerable
(3.02-12ubuntu1)
|
|
| precise |
Not vulnerable
(3.02-12ubuntu1)
|
|
| quantal |
Not vulnerable
(3.02-12ubuntu1)
|
|
| raring |
Not vulnerable
(3.02-12ubuntu1)
|
|
| saucy |
Not vulnerable
(3.02-12ubuntu1)
|
|
| trusty |
Does not exist
(trusty was not-affected [3.02-12ubuntu1])
|
|
| upstream |
Released
(3.02-12)
|
|
| utopic |
Not vulnerable
(3.02-12ubuntu1)
|
|
| vivid |
Not vulnerable
(3.02-12ubuntu1)
|
|
| wily |
Not vulnerable
(3.02-12ubuntu1)
|
|
| xenial |
Not vulnerable
(3.02-12ubuntu1)
|
|
| yakkety |
Not vulnerable
(3.02-12ubuntu1)
|
|
| zesty |
Not vulnerable
(3.02-12ubuntu1)
|
|
|
Patches:
debdiff: https://bugs.launchpad.net/ubuntu/+source/xpdf/+bug/701220 |
||