CVE-2010-3703
Estado: ModificadaMedia (4.3)—
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
- Puntuación base: 4.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.56%
- Percentil entre todas las CVEs puntuadas: 85
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-20
Referencias
- http://cgit.freedesktop.org/poppler/poppler/commit/?id=bf2055088a3a2d3bb3d3c37d464954ec1a25771f
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049392.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049523.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049545.html
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
- http://secunia.com/advisories/42357
- http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.571720
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:231
- http://www.openwall.com/lists/oss-security/2010/10/04/6
- http://www.redhat.com/support/errata/RHSA-2010-0859.html
- http://www.ubuntu.com/usn/USN-1005-1
- https://bugzilla.redhat.com/show_bug.cgi?id=639356
- http://cgit.freedesktop.org/poppler/poppler/commit/?id=bf2055088a3a2d3bb3d3c37d464954ec1a25771f
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049392.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049523.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049545.html
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
- http://secunia.com/advisories/42357
- http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.571720
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:231
- http://www.openwall.com/lists/oss-security/2010/10/04/6
- http://www.redhat.com/support/errata/RHSA-2010-0859.html
- http://www.ubuntu.com/usn/USN-1005-1
- https://bugzilla.redhat.com/show_bug.cgi?id=639356
JSON original (NVD)
Mostrar
{
"id": "CVE-2010-3703",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "secalert@redhat.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-11-05T18:00:25.877",
"references": [
{
"url": "http://cgit.freedesktop.org/poppler/poppler/commit/?id=bf2055088a3a2d3bb3d3c37d464954ec1a25771f",
"source": "secalert@redhat.com"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049392.html",
"source": "secalert@redhat.com"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049523.html",
"source": "secalert@redhat.com"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049545.html",
"source": "secalert@redhat.com"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html",
"source": "secalert@redhat.com"
},
{
"url": "http://secunia.com/advisories/42357",
"source": "secalert@redhat.com"
},
{
"url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.571720",
"source": "secalert@redhat.com"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:231",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2010/10/04/6",
"source": "secalert@redhat.com"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2010-0859.html",
"source": "secalert@redhat.com"
},
{
"url": "http://www.ubuntu.com/usn/USN-1005-1",
"source": "secalert@redhat.com"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=639356",
"source": "secalert@redhat.com"
},
{
"url": "http://cgit.freedesktop.org/poppler/poppler/commit/?id=bf2055088a3a2d3bb3d3c37d464954ec1a25771f",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049392.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049523.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049545.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/42357",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.571720",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:231",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.openwall.com/lists/oss-security/2010/10/04/6",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2010-0859.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ubuntu.com/usn/USN-1005-1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=639356",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference."
},
{
"lang": "es",
"value": "La función PostScriptFunction::PostScriptFunction en poppler/Function.cc en el analizador de PDF de poppler v0.8.7 y posiblemente otras versiones hasta v0.15.1, y posiblemente otros, permite provocar una denegación de servicio (por caída de la aplicación) a atacantes dependientes de contexto a través de un archivo PDF que desencadena una desreferencia a un puntero no inicializado."
}
],
"lastModified": "2026-06-16T23:23:22.277",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6323ED7A-6FE8-4885-B743-3E2F82ECA08B"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "90D3345C-2D35-413C-B6F9-C308BC7C2AA6"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A9D3618D-A183-4B09-9CA2-8D622C3486DD"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A88294D9-563E-4AB3-9FE6-971F43B052B4"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A39F672-B238-4B21-A48E-5121771949F3"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "58A5D199-E952-44B5-B5E5-170040FA813E"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55A8D058-224E-467E-AB61-06F90B541F24"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77C47EDD-2212-4259-8229-FF05E1A7B5AD"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.10.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C52995D0-0986-427F-B37D-2F6726EA330D"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.10.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E4427C5-DBF0-4EF9-8B7A-61D56C14E3FB"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.10.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B91206CA-7EBE-4E64-9A49-D7EC0D051012"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.11.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFD43644-7F02-42AF-8EC3-C326A13E2F89"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.11.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81FE2E6F-44B2-42D5-B986-D1FE2B510968"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.11.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A605079-3705-4E2C-8F6D-C21B4D875817"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.11.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3ABBD590-8092-4920-BBC7-F3ACB9CCC900"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.12.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14D812D5-BC8B-4907-AA70-F8D7F982A8DD"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.12.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E25003C-04CE-401F-B012-F2E13DC8E8C0"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.12.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "189FE6D1-C001-4D43-BFD2-B8421C6FAB06"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.12.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CAF3866C-09D2-4564-A7AE-2C49A5E8480C"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.12.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A43C280F-A571-4EF9-B301-244B05750933"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.13.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D37AC0D5-6811-4FE2-83BB-FEF44B228645"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.13.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2B24274-2F2F-4F3A-8978-390BF69EF0AD"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.13.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14959178-17D0-4794-867F-AB62501EEF24"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.13.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1129356-C0B0-4130-A1EF-888B02783317"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.13.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CD0FA23-F797-4FB5-85AD-29AED926E02D"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.14.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77B06D79-50AD-49D0-B372-25CA226EEA80"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.14.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A34735C6-2738-4CCC-9322-8F7584AB616D"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.14.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "339A5BC3-7AED-4912-B6D3-BBD5FBF4AA02"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.14.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "325750AA-5E10-457E-88E8-439DFB81FE1E"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.14.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "235861C5-B126-4A27-A51F-94568DBA5FBB"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.14.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0EE3D5F0-DA69-453A-9729-03FD1151D94E"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.15.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83E52568-A112-4533-9CFA-55D35F40AA9A"
},
{
"criteria": "cpe:2.3:a:poppler:poppler:0.15.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38A9C7A2-DAC5-4334-9A88-CF9085A34186"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "secalert@redhat.com"
}