Evil-DB LogoEvil-DB
← All CVEs

CVE-2013-4474

medium · 5

Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service (crash) via format string specifiers in a destination filename.

5
CVSS
10.5%
EPSS (exploit prob.)
96th
EPSS percentile
2013-11-23
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
canonicalubuntu_linux12.04
canonicalubuntu_linux14.04
canonicalubuntu_linux15.10
freedesktoppoppler<= 0.24.1
freedesktoppoppler0.1
freedesktoppoppler0.1.1
freedesktoppoppler0.1.2
freedesktoppoppler0.2.0
freedesktoppoppler0.3.0
freedesktoppoppler0.3.1
freedesktoppoppler0.3.2
freedesktoppoppler0.3.3
freedesktoppoppler0.4.0
freedesktoppoppler0.4.1
freedesktoppoppler0.4.2
freedesktoppoppler0.4.3
freedesktoppoppler0.4.4
freedesktoppoppler0.5.0
freedesktoppoppler0.5.1
freedesktoppoppler0.5.2
freedesktoppoppler0.5.3
freedesktoppoppler0.5.4
freedesktoppoppler0.5.9
freedesktoppoppler0.5.90
freedesktoppoppler0.5.91
freedesktoppoppler0.6.0
freedesktoppoppler0.6.1
freedesktoppoppler0.6.2
freedesktoppoppler0.6.3
freedesktoppoppler0.6.4
freedesktoppoppler0.7.0
freedesktoppoppler0.7.1
freedesktoppoppler0.7.2
freedesktoppoppler0.7.3
freedesktoppoppler0.8.0
freedesktoppoppler0.8.1
freedesktoppoppler0.8.2
freedesktoppoppler0.8.3
freedesktoppoppler0.8.4
freedesktoppoppler0.8.5

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2013-4474