CVE-2012-2142
CVE-2012-2142
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.
CVSS 7.8 · High · EPSS 2.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.openwall.com/lists/oss-security/2013/08/09/6
- http://www.openwall.com/lists/oss-security/2013/08/09/5
- http://cgit.freedesktop.org/poppler/poppler/commit/?id=71bad47ed6a36d825b0d08992c8db56845c71e40
- http://cgit.freedesktop.org/poppler/poppler/commit/NEWS?id=2bc48d5369f1dbecfc4db2878f33bdeb80d8d90f
- https://bugzilla.redhat.com/show_bug.cgi?id=789936
- http://lists.opensuse.org/opensuse-updates/2013-08/msg00049.html
- https://nvd.nist.gov/vuln/detail/CVE-2012-2142