CVE-2013-4474

poppler: format string flaw in pdfseparate utility

Published Nov 23, 2013 CVSS 2.0 · 5.0 Medium EPSS 10.5% KEV · Not listed
Description
Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service (crash) via format string specifiers in a destination filename.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-1074-1 poppler security update
Ubuntu USN Ubuntu USN USN-2958-1 poppler vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 4:45 PM
Reserved
Jun 12, 2013, 12:00 AM
Status
Modified
Published
Nov 23, 2013, 11:55 AM
Modified
Jun 16, 2026, 11:57 PM
Severity
Moderate
Public date
Oct 26, 2013, 12:00 AM