CVE-2013-4473
Fixed in a distro release EPSS 7%
Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a source filename.
Products: freedesktop poppler, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | poppler | 0.18.4-9 |
| Debian 13 | poppler | 0.18.4-9 |
| Debian 14 | poppler | 0.18.4-9 |
| Debian 7 | poppler | 0.18.4-6+deb7u2 |
| Ubuntu 14.04 LTS | poppler | 0.24.5-2ubuntu4.4 |
| openSUSE Tumbleweed | poppler | 0.49.0-1.1 |