Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service (crash) via format string specifiers in a destination filename.

Several buffer and integer overflow issues were discovered in Poppler, a PDF library, that could lead to application crash or possibly other unspecified impact via maliciously crafted files.

For Debian 7 'Wheezy', these problems have been fixed in version 0.18.4-6+deb7u2.

We recommend that you upgrade your poppler packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2958-1 advisory.

    It was discovered that the poppler pdfseparate tool incorrectly handled certain filenames. A local     attacker could use this issue to cause the tool to crash, resulting in a denial of service, or possibly     execute arbitrary code. This issue only applied to Ubuntu 12.04 LTS. (CVE-2013-4473, CVE-2013-4474)

    It was discovered that poppler incorrectly parsed certain malformed PDF documents. If a user or automated     system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or     possibly execute arbitrary code with privileges of the user invoking the program. (CVE-2015-8868)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201401-21 (Poppler: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Poppler. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted PDF in       an application linked against Poppler, possibly resulting in execution of       arbitrary code with the privileges of the process or a Denial of Service       condition.
  Workaround :

    There is no known workaround at this time.

Updated poppler packages fix security vulnerabilities :

Poppler is found to be affected by a stack based buffer overflow vulnerability in the pdfseparate utility. Successfully exploiting this issue could allow remote attackers to execute arbitrary code in the context of the affected application. Failed exploits may result in denial-of-service conditions (CVE-2013-4473).

Poppler was found to have a user controlled format string vulnerability because it fails to sanitize user-supplied input. An attacker may exploit this issue to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will likely result in a denial-of-service condition (CVE-2013-4474).

This update fixes several security issues of pdfseparate.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
102823	Debian DLA-1074-1 : poppler security update	Nessus	Debian Local Security Checks	high
90858	Ubuntu 14.04 LTS : poppler vulnerabilities (USN-2958-1)	Nessus	Ubuntu Local Security Checks	high
72076	GLSA-201401-21 : Poppler: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
71027	Mandriva Linux Security Advisory : poppler (MDVSA-2013:272)	Nessus	Mandriva Local Security Checks	high
70930	Fedora 18 : poppler-0.20.2-17.fc18 (2013-20410)	Nessus	Fedora Local Security Checks	high
70829	Fedora 19 : poppler-0.22.1-5.fc19 (2013-20443)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2013-4474

high

Tenable Plugins

high

high

high

high

high

high