CVE-2010-3704

Published: Nov 5, 2010Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.

Affected (75)

Products: Poppler: Poppler · Foolabs: Xpdf · Glyphandcog: Xpdfreader · +1 more

Show all products

Poppler: Poppler · Foolabs: Xpdf · Glyphandcog: Xpdfreader · Kde: Kdegraphics

1 product

1 product

1 product

1 product

Configuration A

35 vulnerable

Vulnerable Software	Affected Versions
Poppler Poppler	Version 0.10.0
Poppler Poppler	Version 0.10.1
Poppler Poppler	Version 0.10.2
Poppler Poppler	Version 0.10.3
Poppler Poppler	Version 0.10.4
Poppler Poppler	Version 0.10.5
Poppler Poppler	Version 0.10.6
Poppler Poppler	Version 0.10.7
Poppler Poppler	Version 0.11.0
Poppler Poppler	Version 0.11.1
Poppler Poppler	Version 0.11.2
Poppler Poppler	Version 0.11.3
Poppler Poppler	Version 0.12.0
Poppler Poppler	Version 0.12.1
Poppler Poppler	Version 0.12.2
Poppler Poppler	Version 0.12.3
Poppler Poppler	Version 0.12.4
Poppler Poppler	Version 0.13.0
Poppler Poppler	Version 0.13.1
Poppler Poppler	Version 0.13.2
Poppler Poppler	Version 0.13.3
Poppler Poppler	Version 0.13.4
Poppler Poppler	Version 0.14.0
Poppler Poppler	Version 0.14.1
Poppler Poppler	Version 0.14.2
Poppler Poppler	Version 0.14.3
Poppler Poppler	Version 0.14.4
Poppler Poppler	Version 0.14.5
Poppler Poppler	Version 0.15.0
Poppler Poppler	Version 0.15.1
Poppler Poppler	Version 0.8.7
Poppler Poppler	Version 0.9.0
Poppler Poppler	Version 0.9.1
Poppler Poppler	Version 0.9.2
Poppler Poppler	Version 0.9.3

Configuration B

40 vulnerable

Vulnerable Software	Affected Versions
Foolabs Xpdf	Version 0.5a
Foolabs Xpdf	Version 0.7a
Foolabs Xpdf	Version 0.91a
Foolabs Xpdf	Version 0.91b
Foolabs Xpdf	Version 0.91c
Foolabs Xpdf	Version 0.92a
Foolabs Xpdf	Version 0.92b
Foolabs Xpdf	Version 0.92c
Foolabs Xpdf	Version 0.92d
Foolabs Xpdf	Version 0.92e
Foolabs Xpdf	Version 0.93a
Foolabs Xpdf	Version 0.93b
Foolabs Xpdf	Version 0.93c
Foolabs Xpdf	Version 1.00a
Foolabs Xpdf	Version 3.0.1
Foolabs Xpdf	Version 3.02pl1
Foolabs Xpdf	Version 3.02pl2
Foolabs Xpdf	Version 3.02pl3
Glyphandcog Xpdfreader	Up to 3.02
Glyphandcog Xpdfreader	Version 0.2
Glyphandcog Xpdfreader	Version 0.3
Glyphandcog Xpdfreader	Version 0.4
Glyphandcog Xpdfreader	Version 0.5
Glyphandcog Xpdfreader	Version 0.6
Glyphandcog Xpdfreader	Version 0.7
Glyphandcog Xpdfreader	Version 0.80
Glyphandcog Xpdfreader	Version 0.90
Glyphandcog Xpdfreader	Version 0.91
Glyphandcog Xpdfreader	Version 0.92
Glyphandcog Xpdfreader	Version 0.93
Glyphandcog Xpdfreader	Version 1.00
Glyphandcog Xpdfreader	Version 1.01
Glyphandcog Xpdfreader	Version 2.00
Glyphandcog Xpdfreader	Version 2.01
Glyphandcog Xpdfreader	Version 2.02
Glyphandcog Xpdfreader	Version 2.03
Glyphandcog Xpdfreader	Version 3.00
Glyphandcog Xpdfreader	Version 3.01
Glyphandcog Xpdfreader	Version 3.02
Kde Kdegraphics	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (74)

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl5.patch (unsafe URL)

Source: secalert@redhat.com

Patch

http://cgit.freedesktop.org/poppler/poppler/commit/?id=39d140bfc0b8239bdd96d6a55842034ae5c05473

Source: secalert@redhat.com

Patch

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050268.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050285.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050390.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049392.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049523.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049545.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2012-1201.html

Source: secalert@redhat.com

http://secunia.com/advisories/42141

Source: secalert@redhat.com

http://secunia.com/advisories/42357

Source: secalert@redhat.com

http://secunia.com/advisories/42397

Source: secalert@redhat.com

http://secunia.com/advisories/42691

Source: secalert@redhat.com

http://secunia.com/advisories/43079

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.571720

Source: secalert@redhat.com

http://www.debian.org/security/2010/dsa-2119

Source: secalert@redhat.com

http://www.debian.org/security/2010/dsa-2135

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2010:228

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2010:229

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2010:230

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2010:231

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2012:144

Source: secalert@redhat.com

http://www.openoffice.org/security/cves/CVE-2010-3702_CVE-2010-3704.html

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2010/10/04/6

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2010-0749.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2010-0751.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2010-0752.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2010-0753.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2010-0859.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/43841

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1005-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/2897

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/3097

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0230

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=638960

Source: secalert@redhat.com

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl5.patch (unsafe URL)