p PatchFirst

CVE-2010-0207

CVE-2010-0207

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (application crash) in xpdf-based PDF viewers.

CVSS 5.5 · Medium · EPSS 0.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • poppler

    Versions
    • 0.26.5-2: Affected

    No fix published

  • poppler Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.16.3-1

    Update to 0.16.3-1

  • poppler Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.16.3-1

    Update to 0.16.3-1

  • poppler Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.16.3-1

    Update to 0.16.3-1

  • xpdf Debian:12

    Versions
    • 3.04+git20220601-1
    • 3.04+git20231213-1
    • 3.04+git20240118-1
    • 3.04+git20240124-1
    • 3.04+git20240202-1
    • 3.04+git20240613-1
    • 3.04+git20250103-1
    • 3.04+git20250304-1
    • 3.04+git20260220-1
    • 3.04+git20260802-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xpdf Debian:13

    Versions
    • 3.04+git20250304-1
    • 3.04+git20260220-1
    • 3.04+git20260802-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xpdf Debian:14

    Versions
    • 3.04+git20250304-1
    • 3.04+git20260220-1
    • 3.04+git20260802-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →