CVE-2010-5110

Upstream information

CVE-2010-5110 at MITRE

Description

DCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service (crash) via a crafted PDF file.

---

SUSE information

Overall state of this security issue: Does not affect SUSE products

This issue is currently rated as having moderate severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	4.3
Vector	AV:N/AC:M/Au:N/C:N/I:N/A:P
Access Vector	Network
Access Complexity	Medium
Authentication	None
Confidentiality Impact	None
Integrity Impact	None
Availability Impact	Partial

SUSE Bugzilla entries: 845765 [VERIFIED / FIXED], 970115 [NEW]

SUSE Security Advisories:

• SUSE-SU-2014:0817-1, published Wed Jun 18 13:04:12 MDT 2014

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Linux Enterprise Desktop 11 SP3	libpoppler-devel >= 0.12.3-1.10.1 libpoppler-glib-devel >= 0.12.3-1.10.1 libpoppler-glib4 >= 0.12.3-1.10.1 libpoppler-qt2 >= 0.12.3-1.10.1 libpoppler-qt3-devel >= 0.12.3-1.10.1 libpoppler-qt4-3 >= 0.12.3-1.10.1 libpoppler-qt4-devel >= 0.12.3-1.10.1 libpoppler5 >= 0.12.3-1.10.1 poppler-tools >= 0.12.3-1.10.1	Patchnames: sdksp3-libpoppler-devel sledsp3-libpoppler-devel
SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4	libpoppler-devel >= 0.12.3-1.10.1 libpoppler-glib-devel >= 0.12.3-1.10.1 libpoppler-qt2 >= 0.12.3-1.10.1 libpoppler-qt3-devel >= 0.12.3-1.10.1 libpoppler-qt4-devel >= 0.12.3-1.10.1 poppler-tools >= 0.12.3-1.10.1	Patchnames: SUSE Linux Enterprise Software Development Kit 11 SP4 GA libpoppler-devel-0.12.3-1.10.1
SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server for SAP Applications 11 SP3	libpoppler-devel >= 0.12.3-1.10.1 libpoppler-glib-devel >= 0.12.3-1.10.1 libpoppler-glib4 >= 0.12.3-1.10.1 libpoppler-qt2 >= 0.12.3-1.10.1 libpoppler-qt3-devel >= 0.12.3-1.10.1 libpoppler-qt4-3 >= 0.12.3-1.10.1 libpoppler-qt4-devel >= 0.12.3-1.10.1 libpoppler5 >= 0.12.3-1.10.1 poppler-tools >= 0.12.3-1.10.1	Patchnames: sdksp3-libpoppler-devel slessp3-libpoppler-devel
SUSE Linux Enterprise Server 11 SP4	libpoppler-devel >= 0.12.3-1.10.1 libpoppler-glib-devel >= 0.12.3-1.10.1 libpoppler-glib4 >= 0.12.3-1.10.1 libpoppler-qt2 >= 0.12.3-1.10.1 libpoppler-qt3-devel >= 0.12.3-1.10.1 libpoppler-qt4-3 >= 0.12.3-1.10.1 libpoppler-qt4-devel >= 0.12.3-1.10.1 libpoppler5 >= 0.12.3-1.10.1 poppler-tools >= 0.12.3-1.10.1	Patchnames: SUSE Linux Enterprise Server 11 SP4 GA libpoppler-glib4-0.12.3-1.10.1 SUSE Linux Enterprise Software Development Kit 11 SP4 GA libpoppler-devel-0.12.3-1.10.1
SUSE Linux Enterprise Software Development Kit 11 SP3	libpoppler-devel >= 0.12.3-1.10.1 libpoppler-glib-devel >= 0.12.3-1.10.1 libpoppler-qt2 >= 0.12.3-1.10.1 libpoppler-qt3-devel >= 0.12.3-1.10.1 libpoppler-qt4-devel >= 0.12.3-1.10.1 poppler-tools >= 0.12.3-1.10.1	Patchnames: sdksp3-libpoppler-devel

---

SUSE Timeline for this CVE

CVE page created: Tue Jul 9 19:04:12 2013
CVE page last modified: Thu Jul 25 12:13:30 2024