p PatchFirst

CVE-2010-0206

CVE-2010-0206

This page contains facts from public vulnerability sources. Check the original advisory before updating.

xpdf allows remote attackers to cause a denial of service (NULL pointer dereference and crash) in the way it processes JBIG2 PDF stream objects.

CVSS 5.5 · Medium · EPSS 1.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • xpdf

    Versions
    • N/A: Affected

    No fix published

  • poppler Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.16.3-1

    Update to 0.16.3-1

  • poppler Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.16.3-1

    Update to 0.16.3-1

  • poppler Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.16.3-1

    Update to 0.16.3-1

  • xpdf Debian:12

    Versions
    • 3.04+git20220601-1
    • 3.04+git20231213-1
    • 3.04+git20240118-1
    • 3.04+git20240124-1
    • 3.04+git20240202-1
    • 3.04+git20240613-1
    • 3.04+git20250103-1
    • 3.04+git20250304-1
    • 3.04+git20260220-1
    • 3.04+git20260802-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xpdf Debian:13

    Versions
    • 3.04+git20250304-1
    • 3.04+git20260220-1
    • 3.04+git20260802-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xpdf Debian:14

    Versions
    • 3.04+git20250304-1
    • 3.04+git20260220-1
    • 3.04+git20260802-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →