9.3 - GLSA-201402-17

Executive Summary

Summary
Title	Xpdf: User-assisted execution of arbitrary code

Informations
Name	GLSA-201402-17	First vendor Publication	2014-02-17
Vendor	Gentoo	Last vendor Modification	2014-02-17
Severity (Vendor)	Normal	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Synopsis

Multiple vulnerabilities in Xpdf could result in execution of arbitrary code.

Background

Xpdf is an X viewer for PDF files.

Description

Multiple vulnerabilities have been discovered in Xpdf. Please review the CVE identifiers referenced below for details.

Impact

A context-dependent attacker could execute arbitrary code or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

Gentoo has discontinued support for Xpdf. We recommend that users unmerge Xpdf:
# emerge --unmerge "app-text/xpdf"

References

[ 1 ] CVE-2009-4035 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-4035
[ 2 ] CVE-2010-3702 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3702
[ 3 ] CVE-2010-3704 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3704

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-201402-17.xml

Original Source

Url : http://security.gentoo.org/glsa/glsa-201402-17.xml

CWE : Common Weakness Enumeration

%	Id	Name
33 %	CWE-476	NULL Pointer Dereference
33 %	CWE-94	Failure to Control Generation of Code ('Code Injection')
33 %	CWE-20	Improper Input Validation

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10996

Oval ID:	oval:org.mitre.oval:def:10996
Title:	The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a crafted Type 1 font that can produce a negative value, leading to a signed-to-unsigned integer conversion error and a buffer overflow.
Description:	The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a crafted Type 1 font that can produce a negative value, leading to a signed-to-unsigned integer conversion error and a buffer overflow.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-4035	Version:	5
Platform(s):	Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4	Product(s):
Definition Synopsis:
RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section kdegraphics-devel is earlier than 7:3.3.1-17.el4_8.1 AND gpdf is earlier than 0:2.8.2-7.7.2.el4_8.6 AND xpdf is earlier than 1:3.00-23.el4_8.1 AND kdegraphics is earlier than 7:3.3.1-17.el4_8.1

Definition Id: oval:org.mitre.oval:def:13442

Oval ID:	oval:org.mitre.oval:def:13442
Title:	USN-1005-1 -- poppler vulnerabilities
Description:	It was discovered that poppler contained multiple security issues when parsing malformed PDF documents. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program.
Family:	unix	Class:	patch
Reference(s):	USN-1005-1 CVE-2010-3702 CVE-2010-3703 CVE-2010-3704	Version:	5
Platform(s):	Ubuntu 9.04 Ubuntu 9.10 Ubuntu 6.06 Ubuntu 8.04 Ubuntu 10.10 Ubuntu 10.04	Product(s):	poppler
Definition Synopsis:
Release section Ubuntu 9.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section poppler-utils DPKG is earlier than 0.10.5-1ubuntu2.6 AND libpoppler-qt4-3 DPKG is earlier than 0.10.5-1ubuntu2.6 AND libpoppler-dev DPKG is earlier than 0.10.5-1ubuntu2.6 AND libpoppler-qt-dev DPKG is earlier than 0.10.5-1ubuntu2.6 AND libpoppler-qt2 DPKG is earlier than 0.10.5-1ubuntu2.6 AND libpoppler-qt4-dev DPKG is earlier than 0.10.5-1ubuntu2.6 AND libpoppler4 DPKG is earlier than 0.10.5-1ubuntu2.6 AND libpoppler-glib-dev DPKG is earlier than 0.10.5-1ubuntu2.6 AND libpoppler-glib4 DPKG is earlier than 0.10.5-1ubuntu2.6 AND poppler-dbg DPKG is earlier than 0.10.5-1ubuntu2.6 OR Release section Ubuntu 9.10 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Packages section poppler-utils DPKG is earlier than 0.12.0-0ubuntu2.3 AND libpoppler-qt4-3 DPKG is earlier than 0.12.0-0ubuntu2.3 AND libpoppler-dev DPKG is earlier than 0.12.0-0ubuntu2.3 AND libpoppler-qt-dev DPKG is earlier than 0.12.0-0ubuntu2.3 AND libpoppler-qt2 DPKG is earlier than 0.12.0-0ubuntu2.3 AND libpoppler-qt4-dev DPKG is earlier than 0.12.0-0ubuntu2.3 AND libpoppler5 DPKG is earlier than 0.12.0-0ubuntu2.3 AND libpoppler-glib-dev DPKG is earlier than 0.12.0-0ubuntu2.3 AND libpoppler-glib4 DPKG is earlier than 0.12.0-0ubuntu2.3 AND poppler-dbg DPKG is earlier than 0.12.0-0ubuntu2.3 OR Release section Ubuntu 6.06 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section libpoppler1-qt DPKG is earlier than 0.5.1-0ubuntu7.8 AND poppler-utils DPKG is earlier than 0.5.1-0ubuntu7.8 AND libpoppler1-glib DPKG is earlier than 0.5.1-0ubuntu7.8 AND libpoppler-dev DPKG is earlier than 0.5.1-0ubuntu7.8 AND libpoppler-qt-dev DPKG is earlier than 0.5.1-0ubuntu7.8 AND libpoppler1 DPKG is earlier than 0.5.1-0ubuntu7.8 AND libpoppler-glib-dev DPKG is earlier than 0.5.1-0ubuntu7.8 OR Release section Ubuntu 8.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libpoppler-qt-dev DPKG is earlier than 0.6.4-1ubuntu3.5 AND poppler-utils DPKG is earlier than 0.6.4-1ubuntu3.5 AND libpoppler-qt4-2 DPKG is earlier than 0.6.4-1ubuntu3.5 AND libpoppler-dev DPKG is earlier than 0.6.4-1ubuntu3.5 AND libpoppler2 DPKG is earlier than 0.6.4-1ubuntu3.5 AND libpoppler-qt4-dev DPKG is earlier than 0.6.4-1ubuntu3.5 AND libpoppler-glib-dev DPKG is earlier than 0.6.4-1ubuntu3.5 AND libpoppler-glib2 DPKG is earlier than 0.6.4-1ubuntu3.5 AND libpoppler-qt2 DPKG is earlier than 0.6.4-1ubuntu3.5 OR Release section Ubuntu 10.10 is installed AND Supported architectures section Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section poppler-utils DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler-cpp-dev DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler-cpp0 DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler-qt4-3 DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler7 DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler-dev DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler-qt-dev DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler-qt2 DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler-glib-dev DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler-qt4-dev DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler-glib5 DPKG is earlier than 0.14.3-0ubuntu1.1 AND poppler-dbg DPKG is earlier than 0.14.3-0ubuntu1.1 OR Release section Ubuntu 10.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section poppler-utils DPKG is earlier than 0.12.4-0ubuntu5.1 AND libpoppler-qt4-3 DPKG is earlier than 0.12.4-0ubuntu5.1 AND libpoppler-dev DPKG is earlier than 0.12.4-0ubuntu5.1 AND libpoppler-qt-dev DPKG is earlier than 0.12.4-0ubuntu5.1 AND libpoppler-qt4-dev DPKG is earlier than 0.12.4-0ubuntu5.1 AND libpoppler5 DPKG is earlier than 0.12.4-0ubuntu5.1 AND libpoppler-glib-dev DPKG is earlier than 0.12.4-0ubuntu5.1 AND libpoppler-glib4 DPKG is earlier than 0.12.4-0ubuntu5.1 AND poppler-dbg DPKG is earlier than 0.12.4-0ubuntu5.1 AND libpoppler-qt2 DPKG is earlier than 0.12.4-0ubuntu5.1

Definition Id: oval:org.mitre.oval:def:20203

Oval ID:	oval:org.mitre.oval:def:20203
Title:	DSA-2119-1 poppler - several vulnerabilities
Description:	Joel Voss of Leviathan Security Group discovered two vulnerabilities in the Poppler PDF rendering library, which may lead to the execution of arbitrary code if a malformed PDF file is opened.
Family:	unix	Class:	patch
Reference(s):	DSA-2119-1 CVE-2010-3702 CVE-2010-3704	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	poppler
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND poppler DPKG is earlier than 0:0.8.7-4

Definition Id: oval:org.mitre.oval:def:20231

Oval ID:	oval:org.mitre.oval:def:20231
Title:	DSA-2135-1 xpdf - several vulnerabilities
Description:	Joel Voss of Leviathan Security Group discovered two vulnerabilities in xpdf rendering engine, which may lead to the execution of arbitrary code if a malformed PDF file is opened.
Family:	unix	Class:	patch
Reference(s):	DSA-2135-1 CVE-2010-3702 CVE-2010-3704	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	xpdf
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND xpdf DPKG is earlier than 0:3.02-1.4+lenny3

Definition Id: oval:org.mitre.oval:def:22305

Oval ID:	oval:org.mitre.oval:def:22305
Title:	RHSA-2010:0749: poppler security update (Important)
Description:	The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0749-01 CESA-2010:0749 CVE-2010-3702 CVE-2010-3704	Version:	29
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	poppler
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section poppler-utils is earlier than 0:0.5.4-4.4.el5_5.14 AND poppler is earlier than 0:0.5.4-4.4.el5_5.14 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_5.14

Definition Id: oval:org.mitre.oval:def:22318

Oval ID:	oval:org.mitre.oval:def:22318
Title:	RHSA-2010:0859: poppler security update (Important)
Description:	The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0859-03 CVE-2010-3702 CVE-2010-3703 CVE-2010-3704	Version:	42
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	poppler
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section poppler-qt4 is earlier than 0:0.12.4-3.el6_0.1 AND poppler-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-glib-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt4-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt is earlier than 0:0.12.4-3.el6_0.1 AND poppler-glib is earlier than 0:0.12.4-3.el6_0.1 AND poppler-utils is earlier than 0:0.12.4-3.el6_0.1 AND poppler is earlier than 0:0.12.4-3.el6_0.1

Definition Id: oval:org.mitre.oval:def:22369

Oval ID:	oval:org.mitre.oval:def:22369
Title:	RHSA-2010:0753: kdegraphics security update (Important)
Description:	The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0753-01 CESA-2010:0753 CVE-2010-3702 CVE-2010-3704	Version:	29
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	kdegraphics
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section kdegraphics is earlier than 7:3.5.4-17.el5_5.1 AND kdegraphics-devel is earlier than 7:3.5.4-17.el5_5.1

Definition Id: oval:org.mitre.oval:def:22717

Oval ID:	oval:org.mitre.oval:def:22717
Title:	ELSA-2010:0749: poppler security update (Important)
Description:	The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0749-01 CVE-2010-3702 CVE-2010-3704	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	poppler
Definition Synopsis:
Oracle Linux 5.x rpm test poppler-utils is earlier than 0:0.5.4-4.4.el5_5.14 AND poppler is earlier than 0:0.5.4-4.4.el5_5.14 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_5.14

Definition Id: oval:org.mitre.oval:def:22783

Oval ID:	oval:org.mitre.oval:def:22783
Title:	ELSA-2010:0753: kdegraphics security update (Important)
Description:	The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0753-01 CVE-2010-3702 CVE-2010-3704	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	kdegraphics
Definition Synopsis:
Oracle Linux 5.x rpm test kdegraphics is earlier than 7:3.5.4-17.el5_5.1 AND kdegraphics-devel is earlier than 7:3.5.4-17.el5_5.1

Definition Id: oval:org.mitre.oval:def:23546

Oval ID:	oval:org.mitre.oval:def:23546
Title:	ELSA-2010:0859: poppler security update (Important)
Description:	The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0859-03 CVE-2010-3702 CVE-2010-3703 CVE-2010-3704	Version:	17
Platform(s):	Oracle Linux 6	Product(s):	poppler
Definition Synopsis:
Oracle Linux 6.x rpm test poppler-qt4 is earlier than 0:0.12.4-3.el6_0.1 AND poppler-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-glib-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt4-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt is earlier than 0:0.12.4-3.el6_0.1 AND poppler-glib is earlier than 0:0.12.4-3.el6_0.1 AND poppler-utils is earlier than 0:0.12.4-3.el6_0.1 AND poppler is earlier than 0:0.12.4-3.el6_0.1

Definition Id: oval:org.mitre.oval:def:27887

Oval ID:	oval:org.mitre.oval:def:27887
Title:	DEPRECATED: ELSA-2010-0859 -- poppler security update (important)
Description:	[0.12.4-3.el6.1] - Add poppler-0.12.4-CVE-2010-3702.patch (Properly initialize parser) - Add poppler-0.12.4-CVE-2010-3703.patch (Properly initialize stack) - Add poppler-0.12.4-CVE-2010-3704.patch (Fix crash in broken pdf (code < 0)) - Resolves: #639859
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0859 CVE-2010-3702 CVE-2010-3703 CVE-2010-3704	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	poppler
Definition Synopsis:
Oracle Linux 6.x Packages match section poppler is earlier than 0:0.12.4-3.el6_0.1 AND poppler-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-glib is earlier than 0:0.12.4-3.el6_0.1 AND poppler-glib-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt4 is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt4-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-utils is earlier than 0:0.12.4-3.el6_0.1

Definition Id: oval:org.mitre.oval:def:27973

Oval ID:	oval:org.mitre.oval:def:27973
Title:	DEPRECATED: ELSA-2010-0749 -- poppler security update (important)
Description:	[0.5.4-4.4.el5_5.14] - Add poppler-0.5.4-CVE-2010-3702.patch (Properly initialize parser) - Add poppler-0.5.4-CVE-2010-3704.patch (Fix crash in broken pdf (code < 0)) - Resolves: #639839
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0749 CVE-2010-3702 CVE-2010-3704	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	poppler
Definition Synopsis:
Oracle Linux 5.x Packages match section poppler is earlier than 0:0.5.4-4.4.el5_5.14 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_5.14 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_5.14

CPE : Common Platform Enumeration

Type	Description	Count
Application	Apple Cups cpe:2.3:a:apple:cups:1.3.9:::::::* cpe:2.3:a:apple:cups:1.3.8:::::::* cpe:2.3:a:apple:cups:1.3.7:::::::* cpe:2.3:a:apple:cups:1.3.6:::::::* cpe:2.3:a:apple:cups:1.3.5:::::::* cpe:2.3:a:apple:cups:1.3.4:::::::* cpe:2.3:a:apple:cups:1.3.3:::::::* cpe:2.3:a:apple:cups:1.3.2:::::::* cpe:2.3:a:apple:cups:1.3.11:::::::* cpe:2.3:a:apple:cups:1.3.10:::::::* cpe:2.3:a:apple:cups:1.3.1:::::::* cpe:2.3:a:apple:cups:1.3.0:::::::* cpe:2.3:a:apple:cups:1.3:rc1:::::: cpe:2.3:a:apple:cups:1.3:b1:::::: cpe:2.3:a:apple:cups:1.3:rc2:::::: cpe:2.3:a:apple:cups:1.2.9:::::::* cpe:2.3:a:apple:cups:1.2.8:::::::* cpe:2.3:a:apple:cups:1.2.7:::::::* cpe:2.3:a:apple:cups:1.2.6:::::::* cpe:2.3:a:apple:cups:1.2.5:::::::* cpe:2.3:a:apple:cups:1.2.4:::::::* cpe:2.3:a:apple:cups:1.2.3:::::::* cpe:2.3:a:apple:cups:1.2.2:::::::* cpe:2.3:a:apple:cups:1.2.12:::::::* cpe:2.3:a:apple:cups:1.2.11:::::::* cpe:2.3:a:apple:cups:1.2.10:::::::* cpe:2.3:a:apple:cups:1.2.1:::::::* cpe:2.3:a:apple:cups:1.2.0:::::::* cpe:2.3:a:apple:cups:1.2:b1:::::: cpe:2.3:a:apple:cups:1.2:b2:::::: cpe:2.3:a:apple:cups:1.2:rc3:::::: cpe:2.3:a:apple:cups:1.2:rc2:::::: cpe:2.3:a:apple:cups:1.2:rc1:::::: cpe:2.3:a:apple:cups:1.1.9-1:::::::* cpe:2.3:a:apple:cups:1.1.9:::::::* cpe:2.3:a:apple:cups:1.1.8:::::::* cpe:2.3:a:apple:cups:1.1.7:::::::* cpe:2.3:a:apple:cups:1.1.6-3:::::::* cpe:2.3:a:apple:cups:1.1.6-2:::::::* cpe:2.3:a:apple:cups:1.1.6-1:::::::* cpe:2.3:a:apple:cups:1.1.6:::::::* cpe:2.3:a:apple:cups:1.1.5-2:::::::* cpe:2.3:a:apple:cups:1.1.5-1:::::::* cpe:2.3:a:apple:cups:1.1.5:::::::* cpe:2.3:a:apple:cups:1.1.4:::::::* cpe:2.3:a:apple:cups:1.1.3:::::::* cpe:2.3:a:apple:cups:1.1.23:rc1:::::: cpe:2.3:a:apple:cups:1.1.23:::::::* cpe:2.3:a:apple:cups:1.1.22:::::::* cpe:2.3:a:apple:cups:1.1.22:rc1:::::: cpe:2.3:a:apple:cups:1.1.22:rc2:::::: cpe:2.3:a:apple:cups:1.1.21:rc2:::::: cpe:2.3:a:apple:cups:1.1.21:rc1:::::: cpe:2.3:a:apple:cups:1.1.21:::::::* cpe:2.3:a:apple:cups:1.1.21:-:::::: cpe:2.3:a:apple:cups:1.1.20:rc3:::::: cpe:2.3:a:apple:cups:1.1.20:::::::* cpe:2.3:a:apple:cups:1.1.20:rc5:::::: cpe:2.3:a:apple:cups:1.1.20:rc4:::::: cpe:2.3:a:apple:cups:1.1.20:rc2:::::: cpe:2.3:a:apple:cups:1.1.20:rc1:::::: cpe:2.3:a:apple:cups:1.1.20:rc6:::::: cpe:2.3:a:apple:cups:1.1.2:::::::* cpe:2.3:a:apple:cups:1.1.19:rc1:::::: cpe:2.3:a:apple:cups:1.1.19:rc3:::::: cpe:2.3:a:apple:cups:1.1.19:rc2:::::: cpe:2.3:a:apple:cups:1.1.19:rc5:::::: cpe:2.3:a:apple:cups:1.1.19:rc4:::::: cpe:2.3:a:apple:cups:1.1.19:::::::* cpe:2.3:a:apple:cups:1.1.18:::::::* cpe:2.3:a:apple:cups:1.1.17:::::::* cpe:2.3:a:apple:cups:1.1.16:::::::* cpe:2.3:a:apple:cups:1.1.15:::::::* cpe:2.3:a:apple:cups:1.1.14:::::::* cpe:2.3:a:apple:cups:1.1.13:::::::* cpe:2.3:a:apple:cups:1.1.12:::::::* cpe:2.3:a:apple:cups:1.1.11:::::::* cpe:2.3:a:apple:cups:1.1.10-1:::::::* cpe:2.3:a:apple:cups:1.1.10:::::::* cpe:2.3:a:apple:cups:1.1.1:::::::* cpe:2.3:a:apple:cups:1.1:::::::* cpe:2.3:a:apple:cups:::::::: cpe:2.3:a:apple:cups:-:::::::*	83
Application	Foolabs Xpdf cpe:2.3:a:foolabs:xpdf:3.02pl3:::::::* cpe:2.3:a:foolabs:xpdf:3.02pl2:::::::* cpe:2.3:a:foolabs:xpdf:3.02pl1:::::::* cpe:2.3:a:foolabs:xpdf:3.0.1:::::::* cpe:2.3:a:foolabs:xpdf:1.00a:::::::* cpe:2.3:a:foolabs:xpdf:0.93c:::::::* cpe:2.3:a:foolabs:xpdf:0.93b:::::::* cpe:2.3:a:foolabs:xpdf:0.93a:::::::* cpe:2.3:a:foolabs:xpdf:0.92e:::::::* cpe:2.3:a:foolabs:xpdf:0.92d:::::::* cpe:2.3:a:foolabs:xpdf:0.92c:::::::* cpe:2.3:a:foolabs:xpdf:0.92b:::::::* cpe:2.3:a:foolabs:xpdf:0.92a:::::::* cpe:2.3:a:foolabs:xpdf:0.91c:::::::* cpe:2.3:a:foolabs:xpdf:0.91b:::::::* cpe:2.3:a:foolabs:xpdf:0.91a:::::::* cpe:2.3:a:foolabs:xpdf:0.7a:::::::* cpe:2.3:a:foolabs:xpdf:0.5a:::::::*	18
Application	Freedesktop Poppler cpe:2.3:a:freedesktop:poppler:0.9.3:::::::* cpe:2.3:a:freedesktop:poppler:0.9.2:::::::* cpe:2.3:a:freedesktop:poppler:0.9.1:::::::* cpe:2.3:a:freedesktop:poppler:0.9.0:::::::* cpe:2.3:a:freedesktop:poppler:0.8.7:::::::* cpe:2.3:a:freedesktop:poppler:0.8.6:::::::* cpe:2.3:a:freedesktop:poppler:0.8.5:::::::* cpe:2.3:a:freedesktop:poppler:0.8.4:::::::* cpe:2.3:a:freedesktop:poppler:0.8.3:::::::* cpe:2.3:a:freedesktop:poppler:0.8.2:::::::* cpe:2.3:a:freedesktop:poppler:0.8.1:::::::* cpe:2.3:a:freedesktop:poppler:0.8.0:::::::* cpe:2.3:a:freedesktop:poppler:0.7.3:::::::* cpe:2.3:a:freedesktop:poppler:0.7.2:::::::* cpe:2.3:a:freedesktop:poppler:0.7.1:::::::* cpe:2.3:a:freedesktop:poppler:0.7.0:::::::* cpe:2.3:a:freedesktop:poppler:0.6.4:::::::* cpe:2.3:a:freedesktop:poppler:0.6.3:::::::* cpe:2.3:a:freedesktop:poppler:0.6.2:::::::* cpe:2.3:a:freedesktop:poppler:0.6.1:::::::* cpe:2.3:a:freedesktop:poppler:0.6.0:::::::* cpe:2.3:a:freedesktop:poppler:0.5.91:::::::* cpe:2.3:a:freedesktop:poppler:0.5.90:::::::* cpe:2.3:a:freedesktop:poppler:0.5.9:::::::* cpe:2.3:a:freedesktop:poppler:0.5.4:::::::* cpe:2.3:a:freedesktop:poppler:0.5.3:::::::* cpe:2.3:a:freedesktop:poppler:0.5.2:::::::* cpe:2.3:a:freedesktop:poppler:0.5.1:::::::* cpe:2.3:a:freedesktop:poppler:0.5.0:::::::* cpe:2.3:a:freedesktop:poppler:0.4.4:::::::* cpe:2.3:a:freedesktop:poppler:0.4.3:::::::* cpe:2.3:a:freedesktop:poppler:0.4.2:::::::* cpe:2.3:a:freedesktop:poppler:0.4.1:::::::* cpe:2.3:a:freedesktop:poppler:0.4.0:::::::* cpe:2.3:a:freedesktop:poppler:0.3.3:::::::* cpe:2.3:a:freedesktop:poppler:0.3.2:::::::* cpe:2.3:a:freedesktop:poppler:0.3.1:::::::* cpe:2.3:a:freedesktop:poppler:0.3.0:::::::* cpe:2.3:a:freedesktop:poppler:0.2.0:::::::* cpe:2.3:a:freedesktop:poppler:0.15.1:::::::* cpe:2.3:a:freedesktop:poppler:0.15.0:::::::* cpe:2.3:a:freedesktop:poppler:0.14.5:::::::* cpe:2.3:a:freedesktop:poppler:0.14.4:::::::* cpe:2.3:a:freedesktop:poppler:0.14.3:::::::* cpe:2.3:a:freedesktop:poppler:0.14.2:::::::* cpe:2.3:a:freedesktop:poppler:0.14.1:::::::* cpe:2.3:a:freedesktop:poppler:0.14.0:::::::* cpe:2.3:a:freedesktop:poppler:0.13.4:::::::* cpe:2.3:a:freedesktop:poppler:0.13.3:::::::* cpe:2.3:a:freedesktop:poppler:0.13.2:::::::* cpe:2.3:a:freedesktop:poppler:0.13.1:::::::* cpe:2.3:a:freedesktop:poppler:0.13.0:::::::* cpe:2.3:a:freedesktop:poppler:0.12.4:::::::* cpe:2.3:a:freedesktop:poppler:0.12.3:::::::* cpe:2.3:a:freedesktop:poppler:0.12.2:::::::* cpe:2.3:a:freedesktop:poppler:0.12.1:::::::* cpe:2.3:a:freedesktop:poppler:0.12.0:::::::* cpe:2.3:a:freedesktop:poppler:0.11.3:::::::* cpe:2.3:a:freedesktop:poppler:0.11.2:::::::* cpe:2.3:a:freedesktop:poppler:0.11.1:::::::* cpe:2.3:a:freedesktop:poppler:0.11.0:::::::* cpe:2.3:a:freedesktop:poppler:0.10.7:::::::* cpe:2.3:a:freedesktop:poppler:0.10.6:::::::* cpe:2.3:a:freedesktop:poppler:0.10.5:::::::* cpe:2.3:a:freedesktop:poppler:0.10.4:::::::* cpe:2.3:a:freedesktop:poppler:0.10.3:::::::* cpe:2.3:a:freedesktop:poppler:0.10.2:::::::* cpe:2.3:a:freedesktop:poppler:0.10.1:::::::* cpe:2.3:a:freedesktop:poppler:0.10.0:::::::* cpe:2.3:a:freedesktop:poppler:0.1.2:::::::* cpe:2.3:a:freedesktop:poppler:0.1.1:::::::* cpe:2.3:a:freedesktop:poppler:0.1:::::::* cpe:2.3:a:freedesktop:poppler::::::::	73
Application	Glyphandcog Xpdfreader cpe:2.3:a:glyphandcog:xpdfreader:3.02:::::::* cpe:2.3:a:glyphandcog:xpdfreader:3.01:::::::* cpe:2.3:a:glyphandcog:xpdfreader:3.00:::::::* cpe:2.3:a:glyphandcog:xpdfreader:2.03:::::::* cpe:2.3:a:glyphandcog:xpdfreader:2.02:::::::* cpe:2.3:a:glyphandcog:xpdfreader:2.01:::::::* cpe:2.3:a:glyphandcog:xpdfreader:2.00:::::::* cpe:2.3:a:glyphandcog:xpdfreader:1.01:::::::* cpe:2.3:a:glyphandcog:xpdfreader:1.00:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.93:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.92:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.91:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.90:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.80:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.7:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.6:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.5:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.4:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.3:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.2:::::::* cpe:2.3:a:glyphandcog:xpdfreader::::::::	21
Application	Gnome Gpdf cpe:2.3:a:gnome:gpdf:2.8.2:::::::*	1
Application	Kde Kdegraphics cpe:2.3:a:kde:kdegraphics:3.3.1:::::::* cpe:2.3:a:kde:kdegraphics::::::::	2
Application	Kde Kpdf cpe:2.3:a:kde:kpdf:3.3.1:::::::*	1
Application	Poppler cpe:2.3:a:poppler:poppler:0.9.3:::::::* cpe:2.3:a:poppler:poppler:0.9.2:::::::* cpe:2.3:a:poppler:poppler:0.9.1:::::::* cpe:2.3:a:poppler:poppler:0.9.0:::::::* cpe:2.3:a:poppler:poppler:0.8.7:::::::* cpe:2.3:a:poppler:poppler:0.15.1:::::::* cpe:2.3:a:poppler:poppler:0.15.0:::::::* cpe:2.3:a:poppler:poppler:0.14.5:::::::* cpe:2.3:a:poppler:poppler:0.14.4:::::::* cpe:2.3:a:poppler:poppler:0.14.3:::::::* cpe:2.3:a:poppler:poppler:0.14.2:::::::* cpe:2.3:a:poppler:poppler:0.14.1:::::::* cpe:2.3:a:poppler:poppler:0.14.0:::::::* cpe:2.3:a:poppler:poppler:0.13.4:::::::* cpe:2.3:a:poppler:poppler:0.13.3:::::::* cpe:2.3:a:poppler:poppler:0.13.2:::::::* cpe:2.3:a:poppler:poppler:0.13.1:::::::* cpe:2.3:a:poppler:poppler:0.13.0:::::::* cpe:2.3:a:poppler:poppler:0.12.4:::::::* cpe:2.3:a:poppler:poppler:0.12.3:::::::* cpe:2.3:a:poppler:poppler:0.12.2:::::::* cpe:2.3:a:poppler:poppler:0.12.1:::::::* cpe:2.3:a:poppler:poppler:0.12.0:::::::* cpe:2.3:a:poppler:poppler:0.11.3:::::::* cpe:2.3:a:poppler:poppler:0.11.2:::::::* cpe:2.3:a:poppler:poppler:0.11.1:::::::* cpe:2.3:a:poppler:poppler:0.11.0:::::::* cpe:2.3:a:poppler:poppler:0.10.7:::::::* cpe:2.3:a:poppler:poppler:0.10.6:::::::* cpe:2.3:a:poppler:poppler:0.10.5:::::::* cpe:2.3:a:poppler:poppler:0.10.4:::::::* cpe:2.3:a:poppler:poppler:0.10.3:::::::* cpe:2.3:a:poppler:poppler:0.10.2:::::::* cpe:2.3:a:poppler:poppler:0.10.1:::::::* cpe:2.3:a:poppler:poppler:0.10.0:::::::*	35
Application	Xpdf cpe:2.3:a:xpdf:xpdf:3.0.0:::::::*	1
Application	Xpdfreader Xpdf cpe:2.3:a:xpdfreader:xpdf:3.02:-:::::: cpe:2.3:a:xpdfreader:xpdf:3.02:pl1:::::: cpe:2.3:a:xpdfreader:xpdf:3.02:pl2:::::: cpe:2.3:a:xpdfreader:xpdf:3.02:pl3:::::: cpe:2.3:a:xpdfreader:xpdf:3.02:pl4:::::: cpe:2.3:a:xpdfreader:xpdf::::::::	6
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:10.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:10.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:9.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:9.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:8.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:6.06:::::::*	6
Os	Debian Debian Linux cpe:2.3:o:debian:debian_linux:6.0:::::::* cpe:2.3:o:debian:debian_linux:5.0:::::::*	2
Os	Fedoraproject Fedora cpe:2.3:o:fedoraproject:fedora:14:::::::* cpe:2.3:o:fedoraproject:fedora:13:::::::* cpe:2.3:o:fedoraproject:fedora:12:::::::*	3
Os	Opensuse cpe:2.3:o:opensuse:opensuse:11.3:::::::* cpe:2.3:o:opensuse:opensuse:11.2:::::::* cpe:2.3:o:opensuse:opensuse:11.1:::::::*	3
Os	Redhat Enterprise Linux Desktop cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:::::::*	1
Os	Redhat Enterprise Linux Server cpe:2.3:o:redhat:enterprise_linux_server:5.0:::::::*	1
Os	Redhat Enterprise Linux Workstation cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:::::::*	1
Os	Suse Linux Enterprise Server cpe:2.3:o:suse:linux_enterprise_server:11:sp1:::::: cpe:2.3:o:suse:linux_enterprise_server:11:-:::::: cpe:2.3:o:suse:linux_enterprise_server:10:sp3:::-:::* cpe:2.3:o:suse:linux_enterprise_server:9:::::::*	4

OpenVAS Exploits

Date	Description
2012-08-24	Name : RedHat Update for tetex RHSA-2012:1201-01 File : nvt/gb_RHSA-2012_1201-01_tetex.nasl
2012-08-24	Name : CentOS Update for tetex CESA-2012:1201 centos5 File : nvt/gb_CESA-2012_1201_tetex_centos5.nasl
2011-08-09	Name : CentOS Update for xpdf CESA-2009:1680 centos4 i386 File : nvt/gb_CESA-2009_1680_xpdf_centos4_i386.nasl
2011-08-09	Name : CentOS Update for gpdf CESA-2009:1681 centos4 i386 File : nvt/gb_CESA-2009_1681_gpdf_centos4_i386.nasl
2011-08-09	Name : CentOS Update for kdegraphics CESA-2009:1682 centos4 i386 File : nvt/gb_CESA-2009_1682_kdegraphics_centos4_i386.nasl
2011-08-09	Name : CentOS Update for poppler CESA-2010:0749 centos5 i386 File : nvt/gb_CESA-2010_0749_poppler_centos5_i386.nasl
2011-08-09	Name : CentOS Update for kdegraphics CESA-2010:0753 centos5 i386 File : nvt/gb_CESA-2010_0753_kdegraphics_centos5_i386.nasl
2011-03-07	Name : Debian Security Advisory DSA 2135-1 (xpdf) File : nvt/deb_2135_1.nasl
2010-12-02	Name : Fedora Update for xpdf FEDORA-2010-16744 File : nvt/gb_fedora_2010_16744_xpdf_fc14.nasl
2010-12-02	Name : Fedora Update for poppler FEDORA-2010-15857 File : nvt/gb_fedora_2010_15857_poppler_fc14.nasl
2010-11-17	Name : Debian Security Advisory DSA 2116-1 (poppler) File : nvt/deb_2116_1.nasl
2010-11-16	Name : Mandriva Update for poppler MDVSA-2010:231 (poppler) File : nvt/gb_mandriva_MDVSA_2010_231.nasl
2010-11-16	Name : Mandriva Update for poppler MDVSA-2010:230 (poppler) File : nvt/gb_mandriva_MDVSA_2010_230.nasl
2010-11-16	Name : Mandriva Update for xpdf MDVSA-2010:228 (xpdf) File : nvt/gb_mandriva_MDVSA_2010_228.nasl
2010-11-16	Name : Fedora Update for xpdf FEDORA-2010-16705 File : nvt/gb_fedora_2010_16705_xpdf_fc12.nasl
2010-11-16	Name : Fedora Update for xpdf FEDORA-2010-16662 File : nvt/gb_fedora_2010_16662_xpdf_fc13.nasl
2010-10-22	Name : Ubuntu Update for poppler vulnerabilities USN-1005-1 File : nvt/gb_ubuntu_USN_1005_1.nasl
2010-10-22	Name : Fedora Update for poppler FEDORA-2010-15981 File : nvt/gb_fedora_2010_15981_poppler_fc12.nasl
2010-10-22	Name : Fedora Update for poppler FEDORA-2010-15911 File : nvt/gb_fedora_2010_15911_poppler_fc13.nasl
2010-10-19	Name : CentOS Update for cups CESA-2010:0755 centos4 i386 File : nvt/gb_CESA-2010_0755_cups_centos4_i386.nasl
2010-10-19	Name : CentOS Update for xpdf CESA-2010:0750 centos3 i386 File : nvt/gb_CESA-2010_0750_xpdf_centos3_i386.nasl
2010-10-19	Name : CentOS Update for xpdf CESA-2010:0751 centos4 i386 File : nvt/gb_CESA-2010_0751_xpdf_centos4_i386.nasl
2010-10-19	Name : CentOS Update for gpdf CESA-2010:0752 centos4 i386 File : nvt/gb_CESA-2010_0752_gpdf_centos4_i386.nasl
2010-10-19	Name : RedHat Update for cups RHSA-2010:0755-01 File : nvt/gb_RHSA-2010_0755-01_cups.nasl
2010-10-19	Name : RedHat Update for cups RHSA-2010:0754-01 File : nvt/gb_RHSA-2010_0754-01_cups.nasl
2010-10-19	Name : RedHat Update for kdegraphics RHSA-2010:0753-01 File : nvt/gb_RHSA-2010_0753-01_kdegraphics.nasl
2010-10-19	Name : RedHat Update for gpdf RHSA-2010:0752-01 File : nvt/gb_RHSA-2010_0752-01_gpdf.nasl
2010-10-19	Name : RedHat Update for xpdf RHSA-2010:0751-01 File : nvt/gb_RHSA-2010_0751-01_xpdf.nasl
2010-10-19	Name : RedHat Update for xpdf RHSA-2010:0750-01 File : nvt/gb_RHSA-2010_0750-01_xpdf.nasl
2010-10-19	Name : RedHat Update for poppler RHSA-2010:0749-01 File : nvt/gb_RHSA-2010_0749-01_poppler.nasl
2010-10-19	Name : CentOS Update for kdegraphics CESA-2010:0753 centos4 i386 File : nvt/gb_CESA-2010_0753_kdegraphics_centos4_i386.nasl
2010-10-19	Name : CentOS Update for cups CESA-2010:0754 centos3 i386 File : nvt/gb_CESA-2010_0754_cups_centos3_i386.nasl
2009-12-30	Name : CentOS Security Advisory CESA-2009:1680 (xpdf) File : nvt/ovcesa2009_1680.nasl
2009-12-30	Name : CentOS Security Advisory CESA-2009:1681 (gpdf) File : nvt/ovcesa2009_1681.nasl
2009-12-30	Name : RedHat Security Advisory RHSA-2009:1680 File : nvt/RHSA_2009_1680.nasl
2009-12-30	Name : CentOS Security Advisory CESA-2009:1682 (kdegraphics) File : nvt/ovcesa2009_1682.nasl
2009-12-30	Name : RedHat Security Advisory RHSA-2009:1682 File : nvt/RHSA_2009_1682.nasl
2009-12-30	Name : RedHat Security Advisory RHSA-2009:1681 File : nvt/RHSA_2009_1681.nasl
0000-00-00	Name : Slackware Advisory SSA:2010-324-02 poppler File : nvt/esoft_slk_ssa_2010_324_02.nasl
0000-00-00	Name : Slackware Advisory SSA:2010-324-01 xpdf File : nvt/esoft_slk_ssa_2010_324_01.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
69064	Poppler Gfx::getPos PDF Handling Uninitialized Pointer Dereference DoS
69062	Poppler fofi/FoFiType1.cc FoFiType1::parse Function Memory Corruption
61207	KDE KPDF xpdf/fofi/FoFiType1.cc FoFiType1::parse() Function Overflow

Nessus® Vulnerability Scanner

Date	Description
2017-09-01	Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2017-0147.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_libpoppler-devel-101016.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_OpenOffice_org-110330.nasl - Type : ACT_GATHER_INFO
2014-02-18	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201402-17.nasl - Type : ACT_GATHER_INFO
2013-10-07	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201310-03.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-1201.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0859.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0755.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0754.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0753.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2010-0752.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2010-0751.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2010-0750.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0749.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1682.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2009-1681.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2009-1680.nasl - Type : ACT_GATHER_INFO
2012-08-24	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120823_tetex_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-1201.nasl - Type : ACT_GATHER_INFO
2012-08-24	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2012-1201.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101007_cups_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20101007_gpdf_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101007_kdegraphics_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101007_poppler_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20091216_xpdf_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20091216_kdegraphics_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20091216_gpdf_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20101007_xpdf_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101110_poppler_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libpoppler-devel-101016.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_OpenOffice_org-110330.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_xpdf-101014.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_libpoppler-devel-101021.nasl - Type : ACT_GATHER_INFO
2011-03-21	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libreoffice331-110318.nasl - Type : ACT_GATHER_INFO
2011-03-21	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_libreoffice331-7365.nasl - Type : ACT_GATHER_INFO
2011-02-14	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_f2b43905354511e08e810022190034c0.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote Windows host has a program affected by multiple vulnerabilities. File : openoffice_33.nasl - Type : ACT_GATHER_INFO
2011-01-21	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libpoppler-devel-101017.nasl - Type : ACT_GATHER_INFO
2011-01-21	Name : The remote SuSE 11 host is missing a security update. File : suse_11_xpdf-101015.nasl - Type : ACT_GATHER_INFO
2011-01-03	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2135.nasl - Type : ACT_GATHER_INFO
2010-12-23	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_xpdf-7190.nasl - Type : ACT_GATHER_INFO
2010-12-10	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_kdegraphics3-7235.nasl - Type : ACT_GATHER_INFO
2010-12-06	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12665.nasl - Type : ACT_GATHER_INFO
2010-12-06	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_cups-7244.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libpoppler-devel-101016.nasl - Type : ACT_GATHER_INFO
2010-11-28	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_libpoppler4-7192.nasl - Type : ACT_GATHER_INFO
2010-11-22	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2010-324-02.nasl - Type : ACT_GATHER_INFO
2010-11-22	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2010-324-01.nasl - Type : ACT_GATHER_INFO
2010-11-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0859.nasl - Type : ACT_GATHER_INFO
2010-11-14	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-231.nasl - Type : ACT_GATHER_INFO
2010-11-14	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-228.nasl - Type : ACT_GATHER_INFO
2010-11-14	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-230.nasl - Type : ACT_GATHER_INFO
2010-11-05	Name : The remote Fedora host is missing a security update. File : fedora_2010-16662.nasl - Type : ACT_GATHER_INFO
2010-11-05	Name : The remote Fedora host is missing a security update. File : fedora_2010-16705.nasl - Type : ACT_GATHER_INFO
2010-11-05	Name : The remote Fedora host is missing a security update. File : fedora_2010-16744.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1005-1.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote Fedora host is missing a security update. File : fedora_2010-15911.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote Fedora host is missing a security update. File : fedora_2010-15981.nasl - Type : ACT_GATHER_INFO
2010-10-18	Name : The remote Fedora host is missing a security update. File : fedora_2010-15857.nasl - Type : ACT_GATHER_INFO
2010-10-14	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2119.nasl - Type : ACT_GATHER_INFO
2010-10-12	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0749.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_poppler-6743.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0754.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0755.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0753.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0752.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0751.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0750.nasl - Type : ACT_GATHER_INFO
2010-10-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0755.nasl - Type : ACT_GATHER_INFO
2010-10-08	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0750.nasl - Type : ACT_GATHER_INFO
2010-10-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0754.nasl - Type : ACT_GATHER_INFO
2010-10-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0753.nasl - Type : ACT_GATHER_INFO
2010-10-08	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0752.nasl - Type : ACT_GATHER_INFO
2010-10-08	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0751.nasl - Type : ACT_GATHER_INFO
2010-10-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0749.nasl - Type : ACT_GATHER_INFO
2010-01-12	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libpoppler-devel-100111.nasl - Type : ACT_GATHER_INFO
2010-01-03	Name : The remote openSUSE host is missing a security update. File : suse_11_0_libpoppler-devel-091223.nasl - Type : ACT_GATHER_INFO
2010-01-03	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_poppler-6751.nasl - Type : ACT_GATHER_INFO
2010-01-03	Name : The remote openSUSE host is missing a security update. File : suse_11_1_libpoppler-devel-091222.nasl - Type : ACT_GATHER_INFO
2010-01-03	Name : The remote SuSE system is missing a security patch for libpoppler-devel File : suse_11_2_libpoppler-devel-091222.nasl - Type : ACT_GATHER_INFO
2010-01-03	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libpoppler-devel-091221.nasl - Type : ACT_GATHER_INFO
2009-12-21	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1682.nasl - Type : ACT_GATHER_INFO
2009-12-21	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2009-1681.nasl - Type : ACT_GATHER_INFO
2009-12-21	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2009-1680.nasl - Type : ACT_GATHER_INFO
2009-12-17	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2009-1681.nasl - Type : ACT_GATHER_INFO
2009-12-17	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1682.nasl - Type : ACT_GATHER_INFO
2009-12-17	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2009-1680.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-19 13:21:58	Multiple Updates
2014-02-17 21:19:29	First insertion

Global Informations

Type	Count
CWE ID(s)	3
Oval ID(s)	12
CPE ID(s)	262
osvdb(s)	3
Openvas Exploit(s)	40
Nessus® Exploit(s)	87

	Related
9.3	CVE-2009-4035
7.5	CVE-2010-3702
6.8	CVE-2010-3704
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 3 more Alert(s)

9.3 - GLSA-201402-17

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU