6.8 - MDVSA-2010:229

Executive Summary

Informations
Name	MDVSA-2010:229	First vendor Publication	2010-11-12
Vendor	Mandriva	Last vendor Modification	2010-11-12
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score	6.8	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Multiple vulnerabilities were discovered and corrected in kdegraphics:

The Gfx::getPos function in the PDF parser in kdegraphics, allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference (CVE-2010-3702).

The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in kdegraphics, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted Type1 font that contains a negative array index, which bypasses input validation and which triggers memory corruption (CVE-2010-3704).

The updated packages have been patched to correct these issues.

Original Source

Url : http://www.mandriva.com/security/advisories?name=MDVSA-2010:229

CWE : Common Weakness Enumeration

%	Id	Name
50 %	CWE-476	NULL Pointer Dereference
50 %	CWE-20	Improper Input Validation

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:13442

Oval ID:	oval:org.mitre.oval:def:13442
Title:	USN-1005-1 -- poppler vulnerabilities
Description:	It was discovered that poppler contained multiple security issues when parsing malformed PDF documents. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program.
Family:	unix	Class:	patch
Reference(s):	USN-1005-1 CVE-2010-3702 CVE-2010-3703 CVE-2010-3704	Version:	5
Platform(s):	Ubuntu 9.04 Ubuntu 9.10 Ubuntu 6.06 Ubuntu 8.04 Ubuntu 10.10 Ubuntu 10.04	Product(s):	poppler
Definition Synopsis:
Release section Ubuntu 9.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section poppler-utils DPKG is earlier than 0.10.5-1ubuntu2.6 AND libpoppler-qt4-3 DPKG is earlier than 0.10.5-1ubuntu2.6 AND libpoppler-dev DPKG is earlier than 0.10.5-1ubuntu2.6 AND libpoppler-qt-dev DPKG is earlier than 0.10.5-1ubuntu2.6 AND libpoppler-qt2 DPKG is earlier than 0.10.5-1ubuntu2.6 AND libpoppler-qt4-dev DPKG is earlier than 0.10.5-1ubuntu2.6 AND libpoppler4 DPKG is earlier than 0.10.5-1ubuntu2.6 AND libpoppler-glib-dev DPKG is earlier than 0.10.5-1ubuntu2.6 AND libpoppler-glib4 DPKG is earlier than 0.10.5-1ubuntu2.6 AND poppler-dbg DPKG is earlier than 0.10.5-1ubuntu2.6 OR Release section Ubuntu 9.10 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Packages section poppler-utils DPKG is earlier than 0.12.0-0ubuntu2.3 AND libpoppler-qt4-3 DPKG is earlier than 0.12.0-0ubuntu2.3 AND libpoppler-dev DPKG is earlier than 0.12.0-0ubuntu2.3 AND libpoppler-qt-dev DPKG is earlier than 0.12.0-0ubuntu2.3 AND libpoppler-qt2 DPKG is earlier than 0.12.0-0ubuntu2.3 AND libpoppler-qt4-dev DPKG is earlier than 0.12.0-0ubuntu2.3 AND libpoppler5 DPKG is earlier than 0.12.0-0ubuntu2.3 AND libpoppler-glib-dev DPKG is earlier than 0.12.0-0ubuntu2.3 AND libpoppler-glib4 DPKG is earlier than 0.12.0-0ubuntu2.3 AND poppler-dbg DPKG is earlier than 0.12.0-0ubuntu2.3 OR Release section Ubuntu 6.06 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section libpoppler1-qt DPKG is earlier than 0.5.1-0ubuntu7.8 AND poppler-utils DPKG is earlier than 0.5.1-0ubuntu7.8 AND libpoppler1-glib DPKG is earlier than 0.5.1-0ubuntu7.8 AND libpoppler-dev DPKG is earlier than 0.5.1-0ubuntu7.8 AND libpoppler-qt-dev DPKG is earlier than 0.5.1-0ubuntu7.8 AND libpoppler1 DPKG is earlier than 0.5.1-0ubuntu7.8 AND libpoppler-glib-dev DPKG is earlier than 0.5.1-0ubuntu7.8 OR Release section Ubuntu 8.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libpoppler-qt-dev DPKG is earlier than 0.6.4-1ubuntu3.5 AND poppler-utils DPKG is earlier than 0.6.4-1ubuntu3.5 AND libpoppler-qt4-2 DPKG is earlier than 0.6.4-1ubuntu3.5 AND libpoppler-dev DPKG is earlier than 0.6.4-1ubuntu3.5 AND libpoppler2 DPKG is earlier than 0.6.4-1ubuntu3.5 AND libpoppler-qt4-dev DPKG is earlier than 0.6.4-1ubuntu3.5 AND libpoppler-glib-dev DPKG is earlier than 0.6.4-1ubuntu3.5 AND libpoppler-glib2 DPKG is earlier than 0.6.4-1ubuntu3.5 AND libpoppler-qt2 DPKG is earlier than 0.6.4-1ubuntu3.5 OR Release section Ubuntu 10.10 is installed AND Supported architectures section Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section poppler-utils DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler-cpp-dev DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler-cpp0 DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler-qt4-3 DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler7 DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler-dev DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler-qt-dev DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler-qt2 DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler-glib-dev DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler-qt4-dev DPKG is earlier than 0.14.3-0ubuntu1.1 AND libpoppler-glib5 DPKG is earlier than 0.14.3-0ubuntu1.1 AND poppler-dbg DPKG is earlier than 0.14.3-0ubuntu1.1 OR Release section Ubuntu 10.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section poppler-utils DPKG is earlier than 0.12.4-0ubuntu5.1 AND libpoppler-qt4-3 DPKG is earlier than 0.12.4-0ubuntu5.1 AND libpoppler-dev DPKG is earlier than 0.12.4-0ubuntu5.1 AND libpoppler-qt-dev DPKG is earlier than 0.12.4-0ubuntu5.1 AND libpoppler-qt4-dev DPKG is earlier than 0.12.4-0ubuntu5.1 AND libpoppler5 DPKG is earlier than 0.12.4-0ubuntu5.1 AND libpoppler-glib-dev DPKG is earlier than 0.12.4-0ubuntu5.1 AND libpoppler-glib4 DPKG is earlier than 0.12.4-0ubuntu5.1 AND poppler-dbg DPKG is earlier than 0.12.4-0ubuntu5.1 AND libpoppler-qt2 DPKG is earlier than 0.12.4-0ubuntu5.1

Definition Id: oval:org.mitre.oval:def:20203

Oval ID:	oval:org.mitre.oval:def:20203
Title:	DSA-2119-1 poppler - several vulnerabilities
Description:	Joel Voss of Leviathan Security Group discovered two vulnerabilities in the Poppler PDF rendering library, which may lead to the execution of arbitrary code if a malformed PDF file is opened.
Family:	unix	Class:	patch
Reference(s):	DSA-2119-1 CVE-2010-3702 CVE-2010-3704	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	poppler
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND poppler DPKG is earlier than 0:0.8.7-4

Definition Id: oval:org.mitre.oval:def:20231

Oval ID:	oval:org.mitre.oval:def:20231
Title:	DSA-2135-1 xpdf - several vulnerabilities
Description:	Joel Voss of Leviathan Security Group discovered two vulnerabilities in xpdf rendering engine, which may lead to the execution of arbitrary code if a malformed PDF file is opened.
Family:	unix	Class:	patch
Reference(s):	DSA-2135-1 CVE-2010-3702 CVE-2010-3704	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	xpdf
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND xpdf DPKG is earlier than 0:3.02-1.4+lenny3

Definition Id: oval:org.mitre.oval:def:22305

Oval ID:	oval:org.mitre.oval:def:22305
Title:	RHSA-2010:0749: poppler security update (Important)
Description:	The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0749-01 CESA-2010:0749 CVE-2010-3702 CVE-2010-3704	Version:	29
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	poppler
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section poppler-utils is earlier than 0:0.5.4-4.4.el5_5.14 AND poppler is earlier than 0:0.5.4-4.4.el5_5.14 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_5.14

Definition Id: oval:org.mitre.oval:def:22318

Oval ID:	oval:org.mitre.oval:def:22318
Title:	RHSA-2010:0859: poppler security update (Important)
Description:	The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0859-03 CVE-2010-3702 CVE-2010-3703 CVE-2010-3704	Version:	42
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	poppler
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section poppler-qt4 is earlier than 0:0.12.4-3.el6_0.1 AND poppler-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-glib-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt4-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt is earlier than 0:0.12.4-3.el6_0.1 AND poppler-glib is earlier than 0:0.12.4-3.el6_0.1 AND poppler-utils is earlier than 0:0.12.4-3.el6_0.1 AND poppler is earlier than 0:0.12.4-3.el6_0.1

Definition Id: oval:org.mitre.oval:def:22369

Oval ID:	oval:org.mitre.oval:def:22369
Title:	RHSA-2010:0753: kdegraphics security update (Important)
Description:	The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0753-01 CESA-2010:0753 CVE-2010-3702 CVE-2010-3704	Version:	29
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	kdegraphics
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section kdegraphics is earlier than 7:3.5.4-17.el5_5.1 AND kdegraphics-devel is earlier than 7:3.5.4-17.el5_5.1

Definition Id: oval:org.mitre.oval:def:22717

Oval ID:	oval:org.mitre.oval:def:22717
Title:	ELSA-2010:0749: poppler security update (Important)
Description:	The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0749-01 CVE-2010-3702 CVE-2010-3704	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	poppler
Definition Synopsis:
Oracle Linux 5.x rpm test poppler-utils is earlier than 0:0.5.4-4.4.el5_5.14 AND poppler is earlier than 0:0.5.4-4.4.el5_5.14 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_5.14

Definition Id: oval:org.mitre.oval:def:22783

Oval ID:	oval:org.mitre.oval:def:22783
Title:	ELSA-2010:0753: kdegraphics security update (Important)
Description:	The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0753-01 CVE-2010-3702 CVE-2010-3704	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	kdegraphics
Definition Synopsis:
Oracle Linux 5.x rpm test kdegraphics is earlier than 7:3.5.4-17.el5_5.1 AND kdegraphics-devel is earlier than 7:3.5.4-17.el5_5.1

Definition Id: oval:org.mitre.oval:def:23546

Oval ID:	oval:org.mitre.oval:def:23546
Title:	ELSA-2010:0859: poppler security update (Important)
Description:	The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0859-03 CVE-2010-3702 CVE-2010-3703 CVE-2010-3704	Version:	17
Platform(s):	Oracle Linux 6	Product(s):	poppler
Definition Synopsis:
Oracle Linux 6.x rpm test poppler-qt4 is earlier than 0:0.12.4-3.el6_0.1 AND poppler-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-glib-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt4-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt is earlier than 0:0.12.4-3.el6_0.1 AND poppler-glib is earlier than 0:0.12.4-3.el6_0.1 AND poppler-utils is earlier than 0:0.12.4-3.el6_0.1 AND poppler is earlier than 0:0.12.4-3.el6_0.1

Definition Id: oval:org.mitre.oval:def:27887

Oval ID:	oval:org.mitre.oval:def:27887
Title:	DEPRECATED: ELSA-2010-0859 -- poppler security update (important)
Description:	[0.12.4-3.el6.1] - Add poppler-0.12.4-CVE-2010-3702.patch (Properly initialize parser) - Add poppler-0.12.4-CVE-2010-3703.patch (Properly initialize stack) - Add poppler-0.12.4-CVE-2010-3704.patch (Fix crash in broken pdf (code < 0)) - Resolves: #639859
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0859 CVE-2010-3702 CVE-2010-3703 CVE-2010-3704	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	poppler
Definition Synopsis:
Oracle Linux 6.x Packages match section poppler is earlier than 0:0.12.4-3.el6_0.1 AND poppler-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-glib is earlier than 0:0.12.4-3.el6_0.1 AND poppler-glib-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt4 is earlier than 0:0.12.4-3.el6_0.1 AND poppler-qt4-devel is earlier than 0:0.12.4-3.el6_0.1 AND poppler-utils is earlier than 0:0.12.4-3.el6_0.1

Definition Id: oval:org.mitre.oval:def:27973

Oval ID:	oval:org.mitre.oval:def:27973
Title:	DEPRECATED: ELSA-2010-0749 -- poppler security update (important)
Description:	[0.5.4-4.4.el5_5.14] - Add poppler-0.5.4-CVE-2010-3702.patch (Properly initialize parser) - Add poppler-0.5.4-CVE-2010-3704.patch (Fix crash in broken pdf (code < 0)) - Resolves: #639839
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0749 CVE-2010-3702 CVE-2010-3704	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	poppler
Definition Synopsis:
Oracle Linux 5.x Packages match section poppler is earlier than 0:0.5.4-4.4.el5_5.14 AND poppler-devel is earlier than 0:0.5.4-4.4.el5_5.14 AND poppler-utils is earlier than 0:0.5.4-4.4.el5_5.14

CPE : Common Platform Enumeration

Type	Description	Count
Application	Apple Cups cpe:2.3:a:apple:cups:1.3.9:::::::* cpe:2.3:a:apple:cups:1.3.8:::::::* cpe:2.3:a:apple:cups:1.3.7:::::::* cpe:2.3:a:apple:cups:1.3.6:::::::* cpe:2.3:a:apple:cups:1.3.5:::::::* cpe:2.3:a:apple:cups:1.3.4:::::::* cpe:2.3:a:apple:cups:1.3.3:::::::* cpe:2.3:a:apple:cups:1.3.2:::::::* cpe:2.3:a:apple:cups:1.3.11:::::::* cpe:2.3:a:apple:cups:1.3.10:::::::* cpe:2.3:a:apple:cups:1.3.1:::::::* cpe:2.3:a:apple:cups:1.3.0:::::::* cpe:2.3:a:apple:cups:1.3:rc1:::::: cpe:2.3:a:apple:cups:1.3:b1:::::: cpe:2.3:a:apple:cups:1.3:rc2:::::: cpe:2.3:a:apple:cups:1.2.9:::::::* cpe:2.3:a:apple:cups:1.2.8:::::::* cpe:2.3:a:apple:cups:1.2.7:::::::* cpe:2.3:a:apple:cups:1.2.6:::::::* cpe:2.3:a:apple:cups:1.2.5:::::::* cpe:2.3:a:apple:cups:1.2.4:::::::* cpe:2.3:a:apple:cups:1.2.3:::::::* cpe:2.3:a:apple:cups:1.2.2:::::::* cpe:2.3:a:apple:cups:1.2.12:::::::* cpe:2.3:a:apple:cups:1.2.11:::::::* cpe:2.3:a:apple:cups:1.2.10:::::::* cpe:2.3:a:apple:cups:1.2.1:::::::* cpe:2.3:a:apple:cups:1.2.0:::::::* cpe:2.3:a:apple:cups:1.2:b1:::::: cpe:2.3:a:apple:cups:1.2:b2:::::: cpe:2.3:a:apple:cups:1.2:rc3:::::: cpe:2.3:a:apple:cups:1.2:rc2:::::: cpe:2.3:a:apple:cups:1.2:rc1:::::: cpe:2.3:a:apple:cups:1.1.9-1:::::::* cpe:2.3:a:apple:cups:1.1.9:::::::* cpe:2.3:a:apple:cups:1.1.8:::::::* cpe:2.3:a:apple:cups:1.1.7:::::::* cpe:2.3:a:apple:cups:1.1.6-3:::::::* cpe:2.3:a:apple:cups:1.1.6-2:::::::* cpe:2.3:a:apple:cups:1.1.6-1:::::::* cpe:2.3:a:apple:cups:1.1.6:::::::* cpe:2.3:a:apple:cups:1.1.5-2:::::::* cpe:2.3:a:apple:cups:1.1.5-1:::::::* cpe:2.3:a:apple:cups:1.1.5:::::::* cpe:2.3:a:apple:cups:1.1.4:::::::* cpe:2.3:a:apple:cups:1.1.3:::::::* cpe:2.3:a:apple:cups:1.1.23:rc1:::::: cpe:2.3:a:apple:cups:1.1.23:::::::* cpe:2.3:a:apple:cups:1.1.22:::::::* cpe:2.3:a:apple:cups:1.1.22:rc1:::::: cpe:2.3:a:apple:cups:1.1.22:rc2:::::: cpe:2.3:a:apple:cups:1.1.21:rc2:::::: cpe:2.3:a:apple:cups:1.1.21:rc1:::::: cpe:2.3:a:apple:cups:1.1.21:::::::* cpe:2.3:a:apple:cups:1.1.21:-:::::: cpe:2.3:a:apple:cups:1.1.20:rc3:::::: cpe:2.3:a:apple:cups:1.1.20:::::::* cpe:2.3:a:apple:cups:1.1.20:rc5:::::: cpe:2.3:a:apple:cups:1.1.20:rc4:::::: cpe:2.3:a:apple:cups:1.1.20:rc2:::::: cpe:2.3:a:apple:cups:1.1.20:rc1:::::: cpe:2.3:a:apple:cups:1.1.20:rc6:::::: cpe:2.3:a:apple:cups:1.1.2:::::::* cpe:2.3:a:apple:cups:1.1.19:rc1:::::: cpe:2.3:a:apple:cups:1.1.19:rc3:::::: cpe:2.3:a:apple:cups:1.1.19:rc2:::::: cpe:2.3:a:apple:cups:1.1.19:rc5:::::: cpe:2.3:a:apple:cups:1.1.19:rc4:::::: cpe:2.3:a:apple:cups:1.1.19:::::::* cpe:2.3:a:apple:cups:1.1.18:::::::* cpe:2.3:a:apple:cups:1.1.17:::::::* cpe:2.3:a:apple:cups:1.1.16:::::::* cpe:2.3:a:apple:cups:1.1.15:::::::* cpe:2.3:a:apple:cups:1.1.14:::::::* cpe:2.3:a:apple:cups:1.1.13:::::::* cpe:2.3:a:apple:cups:1.1.12:::::::* cpe:2.3:a:apple:cups:1.1.11:::::::* cpe:2.3:a:apple:cups:1.1.10-1:::::::* cpe:2.3:a:apple:cups:1.1.10:::::::* cpe:2.3:a:apple:cups:1.1.1:::::::* cpe:2.3:a:apple:cups:1.1:::::::* cpe:2.3:a:apple:cups:::::::: cpe:2.3:a:apple:cups:-:::::::*	83
Application	Foolabs Xpdf cpe:2.3:a:foolabs:xpdf:3.02pl3:::::::* cpe:2.3:a:foolabs:xpdf:3.02pl2:::::::* cpe:2.3:a:foolabs:xpdf:3.02pl1:::::::* cpe:2.3:a:foolabs:xpdf:3.0.1:::::::* cpe:2.3:a:foolabs:xpdf:1.00a:::::::* cpe:2.3:a:foolabs:xpdf:0.93c:::::::* cpe:2.3:a:foolabs:xpdf:0.93b:::::::* cpe:2.3:a:foolabs:xpdf:0.93a:::::::* cpe:2.3:a:foolabs:xpdf:0.92e:::::::* cpe:2.3:a:foolabs:xpdf:0.92d:::::::* cpe:2.3:a:foolabs:xpdf:0.92c:::::::* cpe:2.3:a:foolabs:xpdf:0.92b:::::::* cpe:2.3:a:foolabs:xpdf:0.92a:::::::* cpe:2.3:a:foolabs:xpdf:0.91c:::::::* cpe:2.3:a:foolabs:xpdf:0.91b:::::::* cpe:2.3:a:foolabs:xpdf:0.91a:::::::* cpe:2.3:a:foolabs:xpdf:0.7a:::::::* cpe:2.3:a:foolabs:xpdf:0.5a:::::::*	18
Application	Freedesktop Poppler cpe:2.3:a:freedesktop:poppler:0.9.3:::::::* cpe:2.3:a:freedesktop:poppler:0.9.2:::::::* cpe:2.3:a:freedesktop:poppler:0.9.1:::::::* cpe:2.3:a:freedesktop:poppler:0.9.0:::::::* cpe:2.3:a:freedesktop:poppler:0.8.7:::::::* cpe:2.3:a:freedesktop:poppler:0.8.6:::::::* cpe:2.3:a:freedesktop:poppler:0.8.5:::::::* cpe:2.3:a:freedesktop:poppler:0.8.4:::::::* cpe:2.3:a:freedesktop:poppler:0.8.3:::::::* cpe:2.3:a:freedesktop:poppler:0.8.2:::::::* cpe:2.3:a:freedesktop:poppler:0.8.1:::::::* cpe:2.3:a:freedesktop:poppler:0.8.0:::::::* cpe:2.3:a:freedesktop:poppler:0.7.3:::::::* cpe:2.3:a:freedesktop:poppler:0.7.2:::::::* cpe:2.3:a:freedesktop:poppler:0.7.1:::::::* cpe:2.3:a:freedesktop:poppler:0.7.0:::::::* cpe:2.3:a:freedesktop:poppler:0.6.4:::::::* cpe:2.3:a:freedesktop:poppler:0.6.3:::::::* cpe:2.3:a:freedesktop:poppler:0.6.2:::::::* cpe:2.3:a:freedesktop:poppler:0.6.1:::::::* cpe:2.3:a:freedesktop:poppler:0.6.0:::::::* cpe:2.3:a:freedesktop:poppler:0.5.91:::::::* cpe:2.3:a:freedesktop:poppler:0.5.90:::::::* cpe:2.3:a:freedesktop:poppler:0.5.9:::::::* cpe:2.3:a:freedesktop:poppler:0.5.4:::::::* cpe:2.3:a:freedesktop:poppler:0.5.3:::::::* cpe:2.3:a:freedesktop:poppler:0.5.2:::::::* cpe:2.3:a:freedesktop:poppler:0.5.1:::::::* cpe:2.3:a:freedesktop:poppler:0.5.0:::::::* cpe:2.3:a:freedesktop:poppler:0.4.4:::::::* cpe:2.3:a:freedesktop:poppler:0.4.3:::::::* cpe:2.3:a:freedesktop:poppler:0.4.2:::::::* cpe:2.3:a:freedesktop:poppler:0.4.1:::::::* cpe:2.3:a:freedesktop:poppler:0.4.0:::::::* cpe:2.3:a:freedesktop:poppler:0.3.3:::::::* cpe:2.3:a:freedesktop:poppler:0.3.2:::::::* cpe:2.3:a:freedesktop:poppler:0.3.1:::::::* cpe:2.3:a:freedesktop:poppler:0.3.0:::::::* cpe:2.3:a:freedesktop:poppler:0.2.0:::::::* cpe:2.3:a:freedesktop:poppler:0.15.1:::::::* cpe:2.3:a:freedesktop:poppler:0.15.0:::::::* cpe:2.3:a:freedesktop:poppler:0.14.5:::::::* cpe:2.3:a:freedesktop:poppler:0.14.4:::::::* cpe:2.3:a:freedesktop:poppler:0.14.3:::::::* cpe:2.3:a:freedesktop:poppler:0.14.2:::::::* cpe:2.3:a:freedesktop:poppler:0.14.1:::::::* cpe:2.3:a:freedesktop:poppler:0.14.0:::::::* cpe:2.3:a:freedesktop:poppler:0.13.4:::::::* cpe:2.3:a:freedesktop:poppler:0.13.3:::::::* cpe:2.3:a:freedesktop:poppler:0.13.2:::::::* cpe:2.3:a:freedesktop:poppler:0.13.1:::::::* cpe:2.3:a:freedesktop:poppler:0.13.0:::::::* cpe:2.3:a:freedesktop:poppler:0.12.4:::::::* cpe:2.3:a:freedesktop:poppler:0.12.3:::::::* cpe:2.3:a:freedesktop:poppler:0.12.2:::::::* cpe:2.3:a:freedesktop:poppler:0.12.1:::::::* cpe:2.3:a:freedesktop:poppler:0.12.0:::::::* cpe:2.3:a:freedesktop:poppler:0.11.3:::::::* cpe:2.3:a:freedesktop:poppler:0.11.2:::::::* cpe:2.3:a:freedesktop:poppler:0.11.1:::::::* cpe:2.3:a:freedesktop:poppler:0.11.0:::::::* cpe:2.3:a:freedesktop:poppler:0.10.7:::::::* cpe:2.3:a:freedesktop:poppler:0.10.6:::::::* cpe:2.3:a:freedesktop:poppler:0.10.5:::::::* cpe:2.3:a:freedesktop:poppler:0.10.4:::::::* cpe:2.3:a:freedesktop:poppler:0.10.3:::::::* cpe:2.3:a:freedesktop:poppler:0.10.2:::::::* cpe:2.3:a:freedesktop:poppler:0.10.1:::::::* cpe:2.3:a:freedesktop:poppler:0.10.0:::::::* cpe:2.3:a:freedesktop:poppler:0.1.2:::::::* cpe:2.3:a:freedesktop:poppler:0.1.1:::::::* cpe:2.3:a:freedesktop:poppler:0.1:::::::* cpe:2.3:a:freedesktop:poppler::::::::	73
Application	Glyphandcog Xpdfreader cpe:2.3:a:glyphandcog:xpdfreader:3.02:::::::* cpe:2.3:a:glyphandcog:xpdfreader:3.01:::::::* cpe:2.3:a:glyphandcog:xpdfreader:3.00:::::::* cpe:2.3:a:glyphandcog:xpdfreader:2.03:::::::* cpe:2.3:a:glyphandcog:xpdfreader:2.02:::::::* cpe:2.3:a:glyphandcog:xpdfreader:2.01:::::::* cpe:2.3:a:glyphandcog:xpdfreader:2.00:::::::* cpe:2.3:a:glyphandcog:xpdfreader:1.01:::::::* cpe:2.3:a:glyphandcog:xpdfreader:1.00:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.93:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.92:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.91:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.90:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.80:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.7:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.6:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.5:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.4:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.3:::::::* cpe:2.3:a:glyphandcog:xpdfreader:0.2:::::::* cpe:2.3:a:glyphandcog:xpdfreader::::::::	21
Application	Kde Kdegraphics cpe:2.3:a:kde:kdegraphics::::::::	1
Application	Poppler cpe:2.3:a:poppler:poppler:0.9.3:::::::* cpe:2.3:a:poppler:poppler:0.9.2:::::::* cpe:2.3:a:poppler:poppler:0.9.1:::::::* cpe:2.3:a:poppler:poppler:0.9.0:::::::* cpe:2.3:a:poppler:poppler:0.8.7:::::::* cpe:2.3:a:poppler:poppler:0.15.1:::::::* cpe:2.3:a:poppler:poppler:0.15.0:::::::* cpe:2.3:a:poppler:poppler:0.14.5:::::::* cpe:2.3:a:poppler:poppler:0.14.4:::::::* cpe:2.3:a:poppler:poppler:0.14.3:::::::* cpe:2.3:a:poppler:poppler:0.14.2:::::::* cpe:2.3:a:poppler:poppler:0.14.1:::::::* cpe:2.3:a:poppler:poppler:0.14.0:::::::* cpe:2.3:a:poppler:poppler:0.13.4:::::::* cpe:2.3:a:poppler:poppler:0.13.3:::::::* cpe:2.3:a:poppler:poppler:0.13.2:::::::* cpe:2.3:a:poppler:poppler:0.13.1:::::::* cpe:2.3:a:poppler:poppler:0.13.0:::::::* cpe:2.3:a:poppler:poppler:0.12.4:::::::* cpe:2.3:a:poppler:poppler:0.12.3:::::::* cpe:2.3:a:poppler:poppler:0.12.2:::::::* cpe:2.3:a:poppler:poppler:0.12.1:::::::* cpe:2.3:a:poppler:poppler:0.12.0:::::::* cpe:2.3:a:poppler:poppler:0.11.3:::::::* cpe:2.3:a:poppler:poppler:0.11.2:::::::* cpe:2.3:a:poppler:poppler:0.11.1:::::::* cpe:2.3:a:poppler:poppler:0.11.0:::::::* cpe:2.3:a:poppler:poppler:0.10.7:::::::* cpe:2.3:a:poppler:poppler:0.10.6:::::::* cpe:2.3:a:poppler:poppler:0.10.5:::::::* cpe:2.3:a:poppler:poppler:0.10.4:::::::* cpe:2.3:a:poppler:poppler:0.10.3:::::::* cpe:2.3:a:poppler:poppler:0.10.2:::::::* cpe:2.3:a:poppler:poppler:0.10.1:::::::* cpe:2.3:a:poppler:poppler:0.10.0:::::::*	35
Application	Xpdfreader Xpdf cpe:2.3:a:xpdfreader:xpdf:3.02:-:::::: cpe:2.3:a:xpdfreader:xpdf:3.02:pl1:::::: cpe:2.3:a:xpdfreader:xpdf:3.02:pl2:::::: cpe:2.3:a:xpdfreader:xpdf:3.02:pl3:::::: cpe:2.3:a:xpdfreader:xpdf:3.02:pl4:::::: cpe:2.3:a:xpdfreader:xpdf::::::::	6
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:10.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:10.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:9.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:9.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:8.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:6.06:::::::*	6
Os	Debian Debian Linux cpe:2.3:o:debian:debian_linux:6.0:::::::* cpe:2.3:o:debian:debian_linux:5.0:::::::*	2
Os	Fedoraproject Fedora cpe:2.3:o:fedoraproject:fedora:14:::::::* cpe:2.3:o:fedoraproject:fedora:13:::::::* cpe:2.3:o:fedoraproject:fedora:12:::::::*	3
Os	Opensuse cpe:2.3:o:opensuse:opensuse:11.3:::::::* cpe:2.3:o:opensuse:opensuse:11.2:::::::* cpe:2.3:o:opensuse:opensuse:11.1:::::::*	3
Os	Redhat Enterprise Linux Desktop cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:::::::*	1
Os	Redhat Enterprise Linux Server cpe:2.3:o:redhat:enterprise_linux_server:5.0:::::::*	1
Os	Redhat Enterprise Linux Workstation cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:::::::*	1
Os	Suse Linux Enterprise Server cpe:2.3:o:suse:linux_enterprise_server:11:sp1:::::: cpe:2.3:o:suse:linux_enterprise_server:11:-:::::: cpe:2.3:o:suse:linux_enterprise_server:10:sp3:::-:::* cpe:2.3:o:suse:linux_enterprise_server:9:::::::*	4

OpenVAS Exploits

Date	Description
2012-08-24	Name : CentOS Update for tetex CESA-2012:1201 centos5 File : nvt/gb_CESA-2012_1201_tetex_centos5.nasl
2012-08-24	Name : RedHat Update for tetex RHSA-2012:1201-01 File : nvt/gb_RHSA-2012_1201-01_tetex.nasl
2011-08-09	Name : CentOS Update for poppler CESA-2010:0749 centos5 i386 File : nvt/gb_CESA-2010_0749_poppler_centos5_i386.nasl
2011-08-09	Name : CentOS Update for kdegraphics CESA-2010:0753 centos5 i386 File : nvt/gb_CESA-2010_0753_kdegraphics_centos5_i386.nasl
2011-03-07	Name : Debian Security Advisory DSA 2135-1 (xpdf) File : nvt/deb_2135_1.nasl
2010-12-02	Name : Fedora Update for xpdf FEDORA-2010-16744 File : nvt/gb_fedora_2010_16744_xpdf_fc14.nasl
2010-12-02	Name : Fedora Update for poppler FEDORA-2010-15857 File : nvt/gb_fedora_2010_15857_poppler_fc14.nasl
2010-11-17	Name : Debian Security Advisory DSA 2116-1 (poppler) File : nvt/deb_2116_1.nasl
2010-11-16	Name : Mandriva Update for poppler MDVSA-2010:231 (poppler) File : nvt/gb_mandriva_MDVSA_2010_231.nasl
2010-11-16	Name : Mandriva Update for poppler MDVSA-2010:230 (poppler) File : nvt/gb_mandriva_MDVSA_2010_230.nasl
2010-11-16	Name : Mandriva Update for xpdf MDVSA-2010:228 (xpdf) File : nvt/gb_mandriva_MDVSA_2010_228.nasl
2010-11-16	Name : Fedora Update for xpdf FEDORA-2010-16705 File : nvt/gb_fedora_2010_16705_xpdf_fc12.nasl
2010-11-16	Name : Fedora Update for xpdf FEDORA-2010-16662 File : nvt/gb_fedora_2010_16662_xpdf_fc13.nasl
2010-10-22	Name : Ubuntu Update for poppler vulnerabilities USN-1005-1 File : nvt/gb_ubuntu_USN_1005_1.nasl
2010-10-22	Name : Fedora Update for poppler FEDORA-2010-15981 File : nvt/gb_fedora_2010_15981_poppler_fc12.nasl
2010-10-22	Name : Fedora Update for poppler FEDORA-2010-15911 File : nvt/gb_fedora_2010_15911_poppler_fc13.nasl
2010-10-19	Name : RedHat Update for gpdf RHSA-2010:0752-01 File : nvt/gb_RHSA-2010_0752-01_gpdf.nasl
2010-10-19	Name : RedHat Update for kdegraphics RHSA-2010:0753-01 File : nvt/gb_RHSA-2010_0753-01_kdegraphics.nasl
2010-10-19	Name : RedHat Update for cups RHSA-2010:0754-01 File : nvt/gb_RHSA-2010_0754-01_cups.nasl
2010-10-19	Name : RedHat Update for cups RHSA-2010:0755-01 File : nvt/gb_RHSA-2010_0755-01_cups.nasl
2010-10-19	Name : RedHat Update for xpdf RHSA-2010:0751-01 File : nvt/gb_RHSA-2010_0751-01_xpdf.nasl
2010-10-19	Name : RedHat Update for xpdf RHSA-2010:0750-01 File : nvt/gb_RHSA-2010_0750-01_xpdf.nasl
2010-10-19	Name : RedHat Update for poppler RHSA-2010:0749-01 File : nvt/gb_RHSA-2010_0749-01_poppler.nasl
2010-10-19	Name : CentOS Update for cups CESA-2010:0755 centos4 i386 File : nvt/gb_CESA-2010_0755_cups_centos4_i386.nasl
2010-10-19	Name : CentOS Update for cups CESA-2010:0754 centos3 i386 File : nvt/gb_CESA-2010_0754_cups_centos3_i386.nasl
2010-10-19	Name : CentOS Update for kdegraphics CESA-2010:0753 centos4 i386 File : nvt/gb_CESA-2010_0753_kdegraphics_centos4_i386.nasl
2010-10-19	Name : CentOS Update for gpdf CESA-2010:0752 centos4 i386 File : nvt/gb_CESA-2010_0752_gpdf_centos4_i386.nasl
2010-10-19	Name : CentOS Update for xpdf CESA-2010:0751 centos4 i386 File : nvt/gb_CESA-2010_0751_xpdf_centos4_i386.nasl
2010-10-19	Name : CentOS Update for xpdf CESA-2010:0750 centos3 i386 File : nvt/gb_CESA-2010_0750_xpdf_centos3_i386.nasl
0000-00-00	Name : Slackware Advisory SSA:2010-324-02 poppler File : nvt/esoft_slk_ssa_2010_324_02.nasl
0000-00-00	Name : Slackware Advisory SSA:2010-324-01 xpdf File : nvt/esoft_slk_ssa_2010_324_01.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
69064	Poppler Gfx::getPos PDF Handling Uninitialized Pointer Dereference DoS
69062	Poppler fofi/FoFiType1.cc FoFiType1::parse Function Memory Corruption

Nessus® Vulnerability Scanner

Date	Description
2017-09-01	Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2017-0147.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_libpoppler-devel-101016.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_OpenOffice_org-110330.nasl - Type : ACT_GATHER_INFO
2014-02-18	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201402-17.nasl - Type : ACT_GATHER_INFO
2013-10-07	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201310-03.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-1201.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0859.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0755.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0754.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0753.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2010-0752.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2010-0751.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2010-0750.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0749.nasl - Type : ACT_GATHER_INFO
2012-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-1201.nasl - Type : ACT_GATHER_INFO
2012-08-24	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120823_tetex_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-24	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2012-1201.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101007_poppler_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20101007_xpdf_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101007_cups_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101110_poppler_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101007_kdegraphics_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20101007_gpdf_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_OpenOffice_org-110330.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libpoppler-devel-101016.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_libpoppler-devel-101021.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_xpdf-101014.nasl - Type : ACT_GATHER_INFO
2011-03-21	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libreoffice331-110318.nasl - Type : ACT_GATHER_INFO
2011-03-21	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_libreoffice331-7365.nasl - Type : ACT_GATHER_INFO
2011-02-14	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_f2b43905354511e08e810022190034c0.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote Windows host has a program affected by multiple vulnerabilities. File : openoffice_33.nasl - Type : ACT_GATHER_INFO
2011-01-21	Name : The remote SuSE 11 host is missing a security update. File : suse_11_xpdf-101015.nasl - Type : ACT_GATHER_INFO
2011-01-21	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libpoppler-devel-101017.nasl - Type : ACT_GATHER_INFO
2011-01-03	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2135.nasl - Type : ACT_GATHER_INFO
2010-12-23	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_xpdf-7190.nasl - Type : ACT_GATHER_INFO
2010-12-10	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_kdegraphics3-7235.nasl - Type : ACT_GATHER_INFO
2010-12-06	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_cups-7244.nasl - Type : ACT_GATHER_INFO
2010-12-06	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12665.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libpoppler-devel-101016.nasl - Type : ACT_GATHER_INFO
2010-11-28	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_libpoppler4-7192.nasl - Type : ACT_GATHER_INFO
2010-11-22	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2010-324-02.nasl - Type : ACT_GATHER_INFO
2010-11-22	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2010-324-01.nasl - Type : ACT_GATHER_INFO
2010-11-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0859.nasl - Type : ACT_GATHER_INFO
2010-11-14	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-228.nasl - Type : ACT_GATHER_INFO
2010-11-14	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-230.nasl - Type : ACT_GATHER_INFO
2010-11-14	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-231.nasl - Type : ACT_GATHER_INFO
2010-11-05	Name : The remote Fedora host is missing a security update. File : fedora_2010-16662.nasl - Type : ACT_GATHER_INFO
2010-11-05	Name : The remote Fedora host is missing a security update. File : fedora_2010-16705.nasl - Type : ACT_GATHER_INFO
2010-11-05	Name : The remote Fedora host is missing a security update. File : fedora_2010-16744.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1005-1.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote Fedora host is missing a security update. File : fedora_2010-15981.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote Fedora host is missing a security update. File : fedora_2010-15911.nasl - Type : ACT_GATHER_INFO
2010-10-18	Name : The remote Fedora host is missing a security update. File : fedora_2010-15857.nasl - Type : ACT_GATHER_INFO
2010-10-14	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2119.nasl - Type : ACT_GATHER_INFO
2010-10-12	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0749.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0750.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0751.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0755.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0754.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0753.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0752.nasl - Type : ACT_GATHER_INFO
2010-10-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0755.nasl - Type : ACT_GATHER_INFO
2010-10-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0749.nasl - Type : ACT_GATHER_INFO
2010-10-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0754.nasl - Type : ACT_GATHER_INFO
2010-10-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0753.nasl - Type : ACT_GATHER_INFO
2010-10-08	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0752.nasl - Type : ACT_GATHER_INFO
2010-10-08	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0751.nasl - Type : ACT_GATHER_INFO
2010-10-08	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0750.nasl - Type : ACT_GATHER_INFO

Global Informations

Type	Count
CWE ID(s)	2
Oval ID(s)	11
CPE ID(s)	258
osvdb(s)	2
Openvas Exploit(s)	31
Nessus® Exploit(s)	68

	Related
7.5	CVE-2010-3702
6.8	CVE-2010-3704
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 2 more Alert(s)

6.8 - MDVSA-2010:229

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Nessus® Vulnerability Scanner

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU