CVE-2010-3702

Published: Nov 5, 2010Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference.

Affected (29)

Products: Apple: Cups · Freedesktop: Poppler · Xpdfreader: Xpdf · +6 more

Show all products

1 product

1 product

1 product

1 product

1 product

1 product

Linux Enterprise Server

Debian

1 product

Debian Linux

Redhat

3 products

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Workstation

Canonical

1 product

Ubuntu Linux

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Apple Cups	Up to 1.3.11
Freedesktop Poppler	From 0.8.7 to 0.15.1
Xpdfreader Xpdf	Up to 3.01
Xpdfreader Xpdf	Version 3.02
Xpdfreader Xpdf	Version 3.02 pl1
Xpdfreader Xpdf	Version 3.02 pl2
Xpdfreader Xpdf	Version 3.02 pl3
Xpdfreader Xpdf	Version 3.02 pl4

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 12
Fedoraproject Fedora	Version 13
Fedoraproject Fedora	Version 14

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.1
Opensuse Opensuse	Version 11.2
Opensuse Opensuse	Version 11.3
Suse Linux Enterprise Server	Version 10 sp3
Suse Linux Enterprise Server	Version 11
Suse Linux Enterprise Server	Version 11 sp1
Suse Linux Enterprise Server	Version 9

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 5.0
Debian Debian Linux	Version 6.0

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Workstation	Version 5.0

Configuration F

6 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 10.10
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 9.04
Canonical Ubuntu Linux	Version 9.10

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (82)

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl5.patch (unsafe URL)

Source: secalert@redhat.com

Broken Link

http://cgit.freedesktop.org/poppler/poppler/commit/?id=e853106b58d6b4b0467dbd6436c9bb1cfbd372cf

Source: secalert@redhat.com

PatchVendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050268.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050285.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050390.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049392.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049523.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049545.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-1201.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/42141

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/42357

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/42397

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/42691

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/43079

Source: secalert@redhat.com

Third Party Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.571720

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2010/dsa-2119

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2010/dsa-2135

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2010:228

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2010:229

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2010:230

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2010:231

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2012:144

Source: secalert@redhat.com

Third Party Advisory

http://www.openoffice.org/security/cves/CVE-2010-3702_CVE-2010-3704.html

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2010/10/04/6

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0749.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0750.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0751.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0752.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0753.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0754.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0755.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0859.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/bid/43845

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-1005-1

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2010/2897

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2010/3097

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2011/0230

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=595245

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl5.patch (unsafe URL)