An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.

The remote host is affected by the vulnerability described in GLSA-201310-03 (Poppler: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Poppler. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted PDF       file, possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update of xpdf fixes an out-of-bounds write in CharCodeToUnicode.cc and a bad instruction pointer while parsing malformed PDF files.

ID	Name	Product	Family	Severity
70309	GLSA-201310-03 : Poppler: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
52163	SuSE 10 Security Update : xpdf (ZYPP Patch Number 7324)	Nessus	SuSE Local Security Checks	high
52162	SuSE 11.1 Security Update : xpdf-tools (SAT Patch Number 3857)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2010-4653

medium

Tenable Plugins

high

high

high