CVE-2013-1790

Publication date 28 February 2013

Last updated 24 July 2024

Ubuntu priority

poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function.

Read the notes from the security team

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
poppler	12.10 quantal	Fixed 0.20.4-0ubuntu1.2
	12.04 LTS precise	Fixed 0.18.4-1ubuntu3.1
	11.10 oneiric	Fixed 0.16.7-2ubuntu2.1
	10.04 LTS lucid	Fixed 0.12.4-0ubuntu5.3
	8.04 LTS hardy	Ignored end of life

Notes

mdeslaur

reproducer is 1004.pdf.asan.7.3

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
poppler	Upstream: ?id=931 Upstream: ?id=50c Upstream: ?id=318 Upstream: ?id=e88 Upstream: ?id=201 Upstream: ?id=b10

References

Related Ubuntu Security Notices (USN)