XPDF 'Gfx::getPos()' (CVE-2010-3702) Unitialized Pointer Dereference Vulnerability
BID:43845
Info
XPDF 'Gfx::getPos()' (CVE-2010-3702) Unitialized Pointer Dereference Vulnerability
| Bugtraq ID: | 43845 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2010-3702 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 07 2010 12:00AM |
| Updated: | Apr 13 2015 09:49PM |
| Credit: | Sauli Pahlman; Joel Voss |
| Vulnerable: |
Xpdf Xpdf 3.0 pl3 Xpdf Xpdf 3.0 pl2 Xpdf Xpdf 3.0 1pl1 Xpdf Xpdf 3.0 1 Xpdf Xpdf 3.0 0 Xpdf Xpdf 2.0.3 Xpdf Xpdf 2.0.2 pl1 Xpdf Xpdf 2.0.2 Xpdf Xpdf 2.0.1 Xpdf Xpdf 2.0 3 Xpdf Xpdf 2.0 2 Xpdf Xpdf 2.0 1 Xpdf Xpdf 2.0 Xpdf Xpdf 1.0 1 Xpdf Xpdf 1.0 0a Xpdf Xpdf 1.0 0 Xpdf Xpdf 0.93 Xpdf Xpdf 0.92 Xpdf Xpdf 0.91 Xpdf Xpdf 0.90 Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise 11 SP1 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SP3 Slackware Linux 10.2 Slackware Linux 10.1 Slackware Linux 10.0 Slackware Linux 9.1 Slackware Linux x86_64 -current Slackware Linux 13.1 x86_64 Slackware Linux 13.1 Slackware Linux 13.0 x86_64 Slackware Linux 13.0 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux 11.0 Slackware Linux -current S.u.S.E. openSUSE 11.3 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux Optional Productivity Application 5 server Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux ES 4.8.z Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4.8.z Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Enterprise Linux 5 Server Redhat Desktop 4.0 Redhat Desktop 3.0 Poppler poppler 0.5.4 Poppler poppler 0.5.3 Poppler poppler 0.5.1 Oracle Enterprise Linux 5 OpenOffice Oracle PDF Import Extension 1.0.3 OpenOffice OpenOffice 3.2.1 OpenOffice OpenOffice 3.1.1 OpenOffice OpenOffice 3.1 OpenOffice OpenOffice 3.3 OpenOffice OpenOffice 3.2 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 KDE kdegraphics 3.3 KDE kdegraphics 3.2.3 KDE kdegraphics 3.2.1 KDE kdegraphics 3.2 GNOME GPdf 2.8.2 GNOME GPdf 2.8 GNOME GPdf 2.1 GNOME GPdf 0.132 GNOME GPdf 0.131 GNOME GPdf 0.112 GNOME GPdf 0.110 Gentoo Linux Foolabs Xpdf 3.02 Foolabs Xpdf 3.01 Foolabs Xpdf 3.00 Foolabs Xpdf 3.0.1 Foolabs Xpdf 2.03 Foolabs Xpdf 2.02 Foolabs Xpdf 2.01 Foolabs Xpdf 2.00 Foolabs Xpdf 1.01 Foolabs Xpdf 1.00 Foolabs Xpdf 0.93 Foolabs Xpdf 0.92 Foolabs Xpdf 0.91 Foolabs Xpdf 0.90 Foolabs Xpdf 0.80 Foolabs Xpdf 0.7 Foolabs Xpdf 0.6 Foolabs Xpdf 0.5 Foolabs Xpdf 0.4 Foolabs Xpdf 0.3 Foolabs Xpdf 0.2 Easy Software Products CUPS 1.4.4 Easy Software Products CUPS 1.4.2 Easy Software Products CUPS 1.4.1 Easy Software Products CUPS 1.3.10 Easy Software Products CUPS 1.3.9 Easy Software Products CUPS 1.3.8 Easy Software Products CUPS 1.3.7 Easy Software Products CUPS 1.3.6 Easy Software Products CUPS 1.3.5 Easy Software Products CUPS 1.3.3 Easy Software Products CUPS 1.3.2 Easy Software Products CUPS 1.2.12 Easy Software Products CUPS 1.2.10 Easy Software Products CUPS 1.2.9 Easy Software Products CUPS 1.2.8 Easy Software Products CUPS 1.2.4 Easy Software Products CUPS 1.2.2 Easy Software Products CUPS 1.1.23 rc1 Easy Software Products CUPS 1.1.23 Easy Software Products CUPS 1.1.22 rc1 Easy Software Products CUPS 1.1.22 Easy Software Products CUPS 1.1.21 Easy Software Products CUPS 1.1.20 Easy Software Products CUPS 1.1.19 rc5 Easy Software Products CUPS 1.1.19 Easy Software Products CUPS 1.1.18 Easy Software Products CUPS 1.1.17 Easy Software Products CUPS 1.1.16 Easy Software Products CUPS 1.1.15 Easy Software Products CUPS 1.1.14 Easy Software Products CUPS 1.1.13 Easy Software Products CUPS 1.1.12 Easy Software Products CUPS 1.1.10 Easy Software Products CUPS 1.1.7 Easy Software Products CUPS 1.1.6 Easy Software Products CUPS 1.1.4 -5 Easy Software Products CUPS 1.1.4 -3 Easy Software Products CUPS 1.1.4 -2 Easy Software Products CUPS 1.1.4 Easy Software Products CUPS 1.1.1 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Avaya Proactive Contact 4.1.2 Avaya Proactive Contact 4.1.1 Avaya Proactive Contact 4.2 Avaya Proactive Contact 4.1 Avaya Proactive Contact 4.0 Avaya Messaging Storage Server 5.2 SP1 Avaya Messaging Storage Server 5.2 Avaya Messaging Storage Server 5.1 Avaya Messaging Storage Server 5.0 Avaya Messaging Storage Server 4.0 Avaya Message Networking 5.2.1 Avaya Message Networking 5.2 Avaya Message Networking 3.1 Avaya Intuity AUDIX LX 2.0 SP2 Avaya Intuity AUDIX LX 2.0 SP1 Avaya Intuity AUDIX LX 2.0 |
| Not Vulnerable: |
OpenOffice Oracle PDF Import Extension 1.0.4 |
Discussion
XPDF 'Gfx::getPos()' (CVE-2010-3702) Unitialized Pointer Dereference Vulnerability
An attacker can exploit this issue by tricking an unsuspecting victim into opening a malicious PDF file with an affected application.
Successful exploits will result in the execution of arbitrary attacker-supplied code in the context of the user running the affected application.
An attacker can exploit this issue by tricking an unsuspecting victim into opening a malicious PDF file with an affected application.
Successful exploits will result in the execution of arbitrary attacker-supplied code in the context of the user running the affected application.
Exploit / POC
XPDF 'Gfx::getPos()' (CVE-2010-3702) Unitialized Pointer Dereference Vulnerability
A working exploit was created by Joel Voss and was submitted to the vendor. There has been no reports of this being exploited in the wild.
A working exploit was created by Joel Voss and was submitted to the vendor. There has been no reports of this being exploited in the wild.