FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2008-2950

This CVE name corresponds to:

Entered	Topic
2008-07-09	poppler -- uninitialized pointer

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2008-2950 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2008-2950
Phase	Assigned(20080630)

Description

The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document.

References

Source	Reference
BUGTRAQ	20080707 [oCERT-2008-007] libpoppler uninitialized pointer
BUGTRAQ	20080709 rPSA-2008-0223-1 poppler
MILW0RM	6032
MISC	http://www.ocert.org/advisories/ocert-2008-007.html
CONFIRM	http://wiki.rpath.com/Advisories:rPSA-2008-0223
FEDORA	FEDORA-2008-7104
GENTOO	GLSA-200807-04
MANDRIVA	MDVSA-2008:146
SUSE	SUSE-SR:2008:015
UBUNTU	USN-631-1
BID	30107
SECUNIA	31167
VUPEN	ADV-2008-2024
SECTRACK	1020435
SECUNIA	30963
SECUNIA	31002
SECUNIA	31267
SECUNIA	31405
SREASON	3977
XF	poppler-page-destructor-code-execution(43619)