CVE-2013-1789

Severity

43%

Complexity

86%

Confidentiality

48%

Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'

splash/Splash.cc in poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to the (1) Splash::arbitraryTransformMask, (2) Splash::blitMask, and (3) Splash::scaleMaskYuXu functions.

Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'

CVSS 2.0 Base Score 4.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:N/A:P).

Overview

First reported 11 years ago

2013-04-09 20:55:00

Last updated 11 years ago

2013-04-10 04:00:00

Affected Software

freedesktop Poppler

References

http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=a205e71a2dbe0c8d4f4905a76a3f79ec522eacec

Exploit, Patch

http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=a9b8ab4657dec65b8b86c225d12c533ad7e984e2

Exploit, Patch

http://j00ru.vexillium.org/?p=1507

FEDORA-2013-3473

FEDORA-2013-3457

52846

Vendor Advisory

USN-1785-1

[oss-security] 20130227 Re: CVE Request: poppler 0.22.1 security fixes

[oss-security] 20130228 Re: CVE Request: poppler 0.22.1 security fixes

https://bugzilla.redhat.com/show_bug.cgi?id=917109

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.