CVE-2013-1790

Publication date 28 February 2013

Last updated 24 July 2024

Ubuntu priority

poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
poppler	12.10 quantal	Fixed 0.20.4-0ubuntu1.2
	12.04 LTS precise	Fixed 0.18.4-1ubuntu3.1
	11.10 oneiric	Fixed 0.16.7-2ubuntu2.1
	10.04 LTS lucid	Fixed 0.12.4-0ubuntu5.3
	8.04 LTS hardy	Ignored end of life

How can I get the fixes?
What do statuses mean?
Patch details

Notes

mdeslaur

reproducer is 1004.pdf.asan.7.3

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
poppler	Upstream: ?id=931 Upstream: ?id=50c Upstream: ?id=318 Upstream: ?id=e88 Upstream: ?id=201 Upstream: ?id=b10

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-1785-1
poppler vulnerabilities
2 April 2013

Other references

http://j00ru.vexillium.org/?p=1507
https://www.cve.org/CVERecord?id=CVE-2013-1790