CVE-2010-5110

Published: Aug 29, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

DCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service (crash) via a crafted PDF file.

Affected (3)

Products: Freedesktop: Poppler

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Freedesktop Poppler	Up to 0.13.2
Freedesktop Poppler	Version 0.13.0
Freedesktop Poppler	Version 0.13.1

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://cgit.freedesktop.org/poppler/poppler/commit/poppler/DCTStream.cc?id=fc071d800cb4329a3ccf898d7bf16b4db7323ad8

Source: secalert@redhat.com

ExploitPatch

http://comments.gmane.org/gmane.comp.security.oss.general/11132

Source: secalert@redhat.com

http://secunia.com/advisories/59857

Source: secalert@redhat.com

https://bugs.freedesktop.org/show_bug.cgi?id=26280

Source: secalert@redhat.com

https://www.suse.com/support/update/announcement/2014/suse-su-20140817-1.html

Source: secalert@redhat.com

http://cgit.freedesktop.org/poppler/poppler/commit/poppler/DCTStream.cc?id=fc071d800cb4329a3ccf898d7bf16b4db7323ad8

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://comments.gmane.org/gmane.comp.security.oss.general/11132

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59857

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.freedesktop.org/show_bug.cgi?id=26280

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.suse.com/support/update/announcement/2014/suse-su-20140817-1.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.