CVE-2008-2950
Published: 7 July 2008
The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document.
Priority
Status
Package | Release | Status |
---|---|---|
xpdf Launchpad, Ubuntu, Debian |
dapper |
Not vulnerable
|
feisty |
Not vulnerable
|
|
gutsy |
Not vulnerable
|
|
upstream |
Not vulnerable
|
|
hardy |
Not vulnerable
|
|
intrepid |
Not vulnerable
|
|
jaunty |
Not vulnerable
|
|
karmic |
Not vulnerable
|
|
gpdf Launchpad, Ubuntu, Debian |
dapper |
Ignored
(end of life)
|
feisty |
Does not exist
|
|
gutsy |
Does not exist
|
|
hardy |
Does not exist
|
|
intrepid |
Does not exist
|
|
jaunty |
Does not exist
|
|
karmic |
Does not exist
|
|
upstream |
Needs triage
|
|
ipe Launchpad, Ubuntu, Debian |
dapper |
Ignored
(end of life)
|
feisty |
Ignored
(end of life, was needs-triage)
|
|
gutsy |
Ignored
(end of life, was needs-triage)
|
|
hardy |
Not vulnerable
(code not present)
|
|
intrepid |
Not vulnerable
(code not present)
|
|
jaunty |
Not vulnerable
(code not present)
|
|
karmic |
Not vulnerable
(code not present)
|
|
upstream |
Not vulnerable
(code not present)
|
|
kdegraphics Launchpad, Ubuntu, Debian |
dapper |
Not vulnerable
(linked to poppler)
|
feisty |
Not vulnerable
(linked to poppler)
|
|
gutsy |
Not vulnerable
(linked to poppler)
|
|
hardy |
Not vulnerable
(linked to poppler)
|
|
intrepid |
Not vulnerable
(linked to poppler)
|
|
jaunty |
Not vulnerable
(linked to poppler)
|
|
karmic |
Not vulnerable
(linked to poppler)
|
|
upstream |
Needs triage
|
|
koffice Launchpad, Ubuntu, Debian |
dapper |
Not vulnerable
(code does not exist)
|
feisty |
Not vulnerable
(code does not exist)
|
|
gutsy |
Not vulnerable
(code does not exist)
|
|
hardy |
Not vulnerable
(code does not exist)
|
|
intrepid |
Not vulnerable
(code does not exist)
|
|
jaunty |
Not vulnerable
(code does not exist)
|
|
karmic |
Not vulnerable
(code does not exist)
|
|
upstream |
Not vulnerable
(code does not exist)
|
|
libextractor Launchpad, Ubuntu, Debian |
dapper |
Ignored
(end of life)
|
feisty |
Ignored
(end of life, was needs-triage)
|
|
gutsy |
Ignored
(end of life, was needs-triage)
|
|
hardy |
Not vulnerable
(code not present)
|
|
intrepid |
Not vulnerable
(code not present)
|
|
jaunty |
Not vulnerable
(code not present)
|
|
karmic |
Not vulnerable
(code not present)
|
|
upstream |
Needs triage
|
|
pdfkit.framework Launchpad, Ubuntu, Debian |
dapper |
Ignored
(end of life)
|
feisty |
Ignored
(end of life, was needs-triage)
|
|
gutsy |
Does not exist
|
|
hardy |
Does not exist
|
|
intrepid |
Does not exist
|
|
jaunty |
Does not exist
|
|
karmic |
Does not exist
|
|
upstream |
Needs triage
|
|
pdftohtml Launchpad, Ubuntu, Debian |
dapper |
Ignored
(end of life)
|
feisty |
Ignored
(end of life, was needs-triage)
|
|
gutsy |
Does not exist
|
|
hardy |
Does not exist
|
|
intrepid |
Does not exist
|
|
jaunty |
Does not exist
|
|
karmic |
Does not exist
|
|
upstream |
Needs triage
|
|
poppler Launchpad, Ubuntu, Debian |
dapper |
Not vulnerable
(code does not exist)
|
feisty |
Not vulnerable
(code does not exist)
|
|
gutsy |
Released
(0.6-0ubuntu2.3)
|
|
hardy |
Released
(0.6.4-1ubuntu3.1)
|
|
intrepid |
Not vulnerable
|
|
jaunty |
Not vulnerable
|
|
karmic |
Not vulnerable
|
|
upstream |
Released
(0.8.4-1.1)
|
|
tetex-bin Launchpad, Ubuntu, Debian |
dapper |
Not vulnerable
(linked to poppler)
|
feisty |
Not vulnerable
(linked to poppler)
|
|
gutsy |
Does not exist
|
|
hardy |
Does not exist
|
|
intrepid |
Does not exist
|
|
jaunty |
Does not exist
|
|
karmic |
Does not exist
|
|
upstream |
Needs triage
|
|
texlive-bin Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
feisty |
Not vulnerable
(linked to poppler)
|
|
gutsy |
Not vulnerable
(linked to poppler)
|
|
hardy |
Not vulnerable
(linked to poppler)
|
|
intrepid |
Not vulnerable
(linked to poppler)
|
|
jaunty |
Not vulnerable
(linked to poppler)
|
|
karmic |
Not vulnerable
(linked to poppler)
|
|
upstream |
Needs triage
|