CVE-2013-1788

Published: Apr 9, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger an "invalid memory access" in (1) splash/Splash.cc, (2) poppler/Function.cc, and (3) poppler/Stream.cc.

Affected (1)

Products: Freedesktop: Poppler

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Freedesktop Poppler	Up to 0.22.0

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (30)

http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=0388837f01bc467045164f9ddaff787000a8caaa

Source: secalert@redhat.com

ExploitPatch

http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=8b6dc55e530b2f5ede6b9dfb64aafdd1d5836492

Source: secalert@redhat.com

ExploitPatch

http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=957aa252912cde85d76c41e9710b33425a82b696

Source: secalert@redhat.com

ExploitPatch

http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=bbc2d8918fe234b7ef2c480eb148943922cc0959

Source: secalert@redhat.com

ExploitPatch

http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=e14b6e9c13d35c9bd1e0c50906ace8e707816888

Source: secalert@redhat.com

ExploitPatch

http://j00ru.vexillium.org/?p=1507

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100081.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100090.html

Source: secalert@redhat.com

http://secunia.com/advisories/52846

Source: secalert@redhat.com

Vendor Advisory

http://ubuntu.com/usn/usn-1785-1

Source: secalert@redhat.com

http://www.debian.org/security/2013/dsa-2719

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2013:143

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2013/02/28/4

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2013/02/28/8

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=917108

Source: secalert@redhat.com

http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=0388837f01bc467045164f9ddaff787000a8caaa

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=8b6dc55e530b2f5ede6b9dfb64aafdd1d5836492

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=957aa252912cde85d76c41e9710b33425a82b696

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=bbc2d8918fe234b7ef2c480eb148943922cc0959

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=e14b6e9c13d35c9bd1e0c50906ace8e707816888

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://j00ru.vexillium.org/?p=1507

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100081.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100090.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/52846

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://ubuntu.com/usn/usn-1785-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2013/dsa-2719

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:143

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/02/28/4

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/02/28/8

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=917108

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.