REDHAT-BUG-595245
First published: Mon May 24 2010(Updated: )
Sauli Pahlman of CERT-FI provided us with fuzzed PDF file which causes xpdf / poppler PDF parser to crash. The crash is caused by an attempt to dereference uninitialized Gfx::parser pointer in Gfx::getPos(), which assumes parser is either NULL or valid Parser pointer. <a href="http://cgit.freedesktop.org/poppler/poppler/tree/poppler/Gfx.cc?id=71063d51#n879">http://cgit.freedesktop.org/poppler/poppler/tree/poppler/Gfx.cc?id=71063d51#n879</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Poppler Data | ||
| Xpdf |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://cgit.freedesktop.org/poppler/poppler/tree/poppler/Gfx.cc?id=71063d51#n879
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=416048&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=416048&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=595245#c2
- http://cgit.freedesktop.org/poppler/poppler/commit/?id=e853106b58d6b4b0467dbd6436c9bb1cfbd372cf
- http://secunia.com/advisories/41596/
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=639861
- https://rhn.redhat.com/errata/RHSA-2010-0749.html
- https://rhn.redhat.com/errata/RHSA-2010-0750.html
- https://rhn.redhat.com/errata/RHSA-2010-0751.html
- https://rhn.redhat.com/errata/RHSA-2010-0752.html
- https://rhn.redhat.com/errata/RHSA-2010-0753.html
- https://rhn.redhat.com/errata/RHSA-2010-0754.html
- https://rhn.redhat.com/errata/RHSA-2010-0755.html
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=455425&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=455425&action=edit
- https://rhn.redhat.com/errata/RHSA-2010-0859.html
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=605823&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=605823&action=edit
- https://rhn.redhat.com/errata/RHSA-2012-1201.html
- https://bugzilla.redhat.com/show_bug.cgi?id=595245
Frequently Asked Questions
What is the severity of REDHAT-BUG-595245?
The severity of REDHAT-BUG-595245 is categorized as a crash vulnerability in the PDF parser.
How do I fix REDHAT-BUG-595245?
To fix REDHAT-BUG-595245, update to the latest version of Freedesktop Poppler or Xpdf that addresses this vulnerability.
Which software is affected by REDHAT-BUG-595245?
REDHAT-BUG-595245 affects Freedesktop Poppler and Xpdf software.
What causes the crash in REDHAT-BUG-595245?
The crash in REDHAT-BUG-595245 is caused by dereferencing an uninitialized parser pointer in the PDF parser.
Is there a workaround for REDHAT-BUG-595245?
Currently, there is no specified workaround for REDHAT-BUG-595245 beyond applying the relevant software updates.
- collector/redhat-bugzilla
- alias/CVE-2010-3702
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/freedesktop
- canonical/poppler data
- vendor/xpdf
- canonical/xpdf