CVE-2012-2142

10 documents7 sources
Severity
7.8HIGH
EPSS
1.3%
top 20.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Freedesktop PopplerPoppler PopplerOpensuse Opensuse+2 more
Timeline
PublishedJan 9
Latest updateApr 23

Description

The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages5 packages

▶NVDfreedesktop/poppler< 0.21.4
▶Debianpoppler< 0.18.4-7+3
▶CVEListV5poppler/popplerbefore 0.21.4
▶NVDxpdfreader/xpdf3.02

Also affects: Enterprise Linux 5.0, 6.0

Patches

Patch: cgit.freedesktop.org ↗Patch: cgit.freedesktop.org ↗Patch: lists.opensuse.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-pwcf-7grp-gwmj: The error function in Error↗2022-04-23
▶
CVEList
CVE-2012-2142: The error function in Error↗2020-01-09
▶
OSV
CVE-2012-2142: The error function in Error↗2020-01-09
▶

📋Vendor Advisories

2
Red Hat
xpdf: Insufficient sanitization of escape sequences in the error messages↗2013-08-09
▶
Debian
CVE-2012-2142: poppler - The error function in Error.cc in poppler before 0.21.4 allows remote attackers ...↗2012
▶

💬Community

4
Bugzilla
CVE-2012-2142 poppler, xpdf: Insufficient sanitization of escape sequences in the error messages [epel-all]↗2013-08-09
▶
Bugzilla
CVE-2012-2142 poppler: poppler, xpdf: Insufficient sanitization of escape sequences in the error messages [fedora-all]↗2013-08-09
▶
Bugzilla
CVE-2012-2142 poppler, xpdf: Insufficient sanitization of escape sequences in the error messages [fedora-all]↗2013-08-09
▶
Bugzilla
CVE-2012-2142 poppler, xpdf: Insufficient sanitization of escape sequences in the error messages↗2012-02-13
▶
CVE-2012-2142 (HIGH CVSS 7.8) | The error function in Error.cc in p | cvebase.io