poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.
    (CVE-2010-4654)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-201310-03 (Poppler: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Poppler. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted PDF       file, possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update of xpdf fixes an out-of-bounds write in CharCodeToUnicode.cc and a bad instruction pointer while parsing malformed PDF files.

ID	Name	Product	Family	Severity
244248	Linux Distros Unpatched Vulnerability : CVE-2010-4654	Nessus	Misc.	high
70309	GLSA-201310-03 : Poppler: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
52163	SuSE 10 Security Update : xpdf (ZYPP Patch Number 7324)	Nessus	SuSE Local Security Checks	high
52162	SuSE 11.1 Security Update : xpdf-tools (SAT Patch Number 3857)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2010-4654

high

Tenable Plugins

high

high

high

high