cbcvebase.
CVE-2010-4653
published 2019-11-13

CVE-2010-4653: An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.

medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.

Affected

15 ranges
VendorProductVersion rangeFixed in
debiandebian_linux
debiandebian_linux
debiandebian_linux
debianpoppler< poppler 0.16.3-1 (bookworm)poppler 0.16.3-1 (bookworm)
debianxpdf< poppler 0.16.3-1 (bookworm)poppler 0.16.3-1 (bookworm)
freedesktoppoppler< 0.16.30.16.3
freedesktoppoppler>= 0 < 0.16.3-10.16.3-1
freedesktoppoppler>= 0 < 0.16.3-10.16.3-1
freedesktoppoppler>= 0 < 0.16.3-10.16.3-1
freedesktoppoppler>= 0 < 0.16.3-10.16.3-1
popplerpoppler
xpdfxpdf>= 0 < 3.02-93.02-9
xpdfxpdf>= 0 < 3.02-93.02-9
xpdfxpdf>= 0 < 3.02-93.02-9
xpdfxpdf>= 0 < 3.02-93.02-9

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv6.5MEDIUM