CVE-2013-4472
published 2014-04-22CVE-2013-4472: The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite…
PriorityP410low3.3CVSS 2.0
AVLACMAuNCNIPAP
EPSS
0.37%
29.7th percentile
The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | poppler | — | — |
| debian | xpdf | — | — |
| freedesktop | poppler | <= 0.24.3 | — |
| freedesktop | poppler | — | — |
| freedesktop | poppler | — | — |
| freedesktop | poppler | — | — |
CVSS provenance
nvdv2.03.3LOWAV:L/AC:M/Au:N/C:N/I:P/A:P
osv3.3LOW
vendor_debian3.3LOW
vendor_redhat3.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6g5q-pc77-85j9: The openTempFile function in goo/gfile
ghsa_unreviewed·2022-05-17
CVE-2013-4472 [LOW] CWE-59 GHSA-6g5q-pc77-85j9: The openTempFile function in goo/gfile
The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
OSV
CVE-2013-4472: The openTempFile function in goo/gfile
osv·2014-04-22·CVSS 3.3
CVE-2013-4472 [LOW] CVE-2013-4472: The openTempFile function in goo/gfile
The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
Red Hat
xpdf: insecure temporary file
vendor_redhat·2013-10-26·CVSS 3.3
CVE-2013-4472 [LOW] CWE-377 xpdf: insecure temporary file
xpdf: insecure temporary file
The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
Statement: Not Vulnerable. This issue does not affect the version of poppler as shipped with Red Hat Enterprise Linux 5 and 6.
Package: poppler (Red Hat Enterprise Linux 5) - Not affected
Package: poppler (Red Hat Enterprise Linux 6) - Not affected
Package: poppler (Red Hat Enterprise Linux 7) - Not affected
Debian
CVE-2013-4472: poppler - The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier...
vendor_debian·2013·CVSS 3.3
CVE-2013-4472 [LOW] CVE-2013-4472: poppler - The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier...
The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2013-4472 poppler, xpdf: insecure temporary file
bugzilla·2013-10-30·CVSS 3.3
CVE-2013-4472 [LOW] CVE-2013-4472 poppler, xpdf: insecure temporary file
CVE-2013-4472 poppler, xpdf: insecure temporary file
Poppler and Xpdf, both seems to be affected by a vulnerability of use of insecure temporary file for non-UNIX OS's. An attacker with local access could potentially exploit this issue to perform symlink attacks, overwriting arbitrary files in the context of the affected application.
The issue is still to be fixed in both poppler and xpdf.
References:
http://seclists.org/oss-sec/2013/q4/181
Discussion:
GBool openTempFile(GooString **name, FILE **f, const char *mode) {
#if defined(_WIN32)
//---------- Win32 ----------
char *tempDir;
GooString *s, *s2;
FILE *f2;
int t, i;
// this has the standard race condition problem, but I haven't found
// a better way to generate temp file names with extensions on
// Windows
if ((tempDir = getenv("
Bugzilla
CVE-2013-4472 CVE-2013-4473 CVE-2013-4474 poppler: various flaws [fedora-all]
bugzilla·2013-10-30·CVSS 3.3
CVE-2013-4472 [LOW] CVE-2013-4472 CVE-2013-4473 CVE-2013-4474 poppler: various flaws [fedora-all]
CVE-2013-4472 CVE-2013-4473 CVE-2013-4474 poppler: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please note: this issue aff
Bugzilla
CVE-2013-4472 poppler, xpdf: insecure temporary file [fedora-all]
bugzilla·2013-10-30·CVSS 3.3
CVE-2013-4472 [LOW] CVE-2013-4472 poppler, xpdf: insecure temporary file [fedora-all]
CVE-2013-4472 poppler, xpdf: insecure temporary file [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please note: this issue affects multipl
Bugzilla
CVE-2013-4472 poppler, xpdf: insecure temporary file [epel-all]
bugzilla·2013-10-30·CVSS 3.3
CVE-2013-4472 [LOW] CVE-2013-4472 poppler, xpdf: insecure temporary file [epel-all]
CVE-2013-4472 poppler, xpdf: insecure temporary file [epel-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please note: this issue affects mult
2014-04-22
Published