CVE-2010-2575: Buffer Overflow
Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2575?
CVE-2010-2575 has a severity rating that allows remote attackers to potentially execute arbitrary code or cause a denial of service.
How do I fix CVE-2010-2575?
To fix CVE-2010-2575, update Okular to a version later than 4.5.0, which contains the necessary security patches.
Which versions are affected by CVE-2010-2575?
CVE-2010-2575 affects Okular versions from 4.3.0 to 4.5.0.
What vulnerabilities does CVE-2010-2575 exploit?
CVE-2010-2575 exploits a heap-based buffer overflow in the RLE decompression functionality of Okular.
Is CVE-2010-2575 a local or remote attack vector?
CVE-2010-2575 is primarily a remote attack vector, allowing attackers to exploit the vulnerability from a distance.