CVE-2008-2950
CVE-2008-2950
The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document.
Affected products
n/a · n/apublic PoCs found — 1
cve_referencewww.exploit-db.com/exploits/6032unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.htmlhttp://secunia.com/advisories/30963http://secunia.com/advisories/31002http://secunia.com/advisories/31167http://secunia.com/advisories/31267http://secunia.com/advisories/31405http://security.gentoo.org/glsa/glsa-200807-04.xmlhttp://securityreason.com/securityalert/3977https://exchange.xforce.ibmcloud.com/vulnerabilities/43619https://www.exploit-db.com/exploits/6032https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00161.htmlhttp://wiki.rpath.com/Advisories:rPSA-2008-0223