CVE-2010-3702: Null Pointer Dereference
Sauli Pahlman of CERT-FI provided us with fuzzed PDF file which causes xpdf / poppler PDF parser to crash.
The crash is caused by an attempt to dereference uninitialized Gfx::parser pointer in Gfx::getPos(), which assumes parser is either NULL or valid Parser pointer.
http://cgit.freedesktop.org/poppler/poppler/tree/poppler/Gfx.cc?id=71063d51#n879
Other sources
The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3702?
The severity of CVE-2010-3702 is classified as medium due to potential crashes caused by malformed PDF files.
How do I fix CVE-2010-3702?
To fix CVE-2010-3702, update the affected software such as Poppler or Xpdf to the latest version that addresses this vulnerability.
What versions are affected by CVE-2010-3702?
CVE-2010-3702 affects versions of Xpdf up to 3.01, Poppler versions between 0.8.7 and 0.15.1, and specific versions of CUPS.
What are the potential impacts of CVE-2010-3702?
The potential impacts of CVE-2010-3702 include application crashes and denial of service when processing specific malicious PDF files.
Who reported CVE-2010-3702?
CVE-2010-3702 was reported by Sauli Pahlman from CERT-FI.