CVE-2013-4474
Fixed in a distro release EPSS 10%
Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service (crash) via format string specifiers in a destination filename.
Products: canonical ubuntu_linux, freedesktop poppler
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | poppler | 0.18.4-9 |
| Debian 13 | poppler | 0.18.4-9 |
| Debian 14 | poppler | 0.18.4-9 |
| Debian 7 | poppler | 0.18.4-6+deb7u2 |
| Ubuntu 14.04 LTS | poppler | 0.24.5-2ubuntu4.4 |
| openSUSE Tumbleweed | poppler | 0.49.0-1.1 |