CVE-2010-3703
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in...
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference.
Exploit likelihood
What each source reports
NVD Score used
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference.
- Record
CVE-2010-3703- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference.
- Record
CVE-2010-3703- Updated
- 2026-11-02
EUVDEUVD-2010-3686 No score
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference.
- Record
EUVD-2010-3686- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qgg5-h322-m2xw No score
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in...
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference.
- Record
GHSA-qgg5-h322-m2xw- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference.
- Record
CVE-2010-3703- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-3703 No score
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference.
- Record
DEBIAN-CVE-2010-3703- Updated
- 2026-11-02
OSVUBUNTU-CVE-2010-3703 No score
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference.
- Record
UBUNTU-CVE-2010-3703- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
popplerDebian:12 |
before 0.12.4-1.2 | 0.12.4-1.2 |
popplerDebian:13 |
before 0.12.4-1.2 | 0.12.4-1.2 |
popplerDebian:14 |
before 0.12.4-1.2 | 0.12.4-1.2 |
xpdfDebian:12 |
before 3.02-9 | 3.02-9 |
xpdfDebian:13 |
before 3.02-9 | 3.02-9 |
xpdfDebian:14 |
before 3.02-9 | 3.02-9 |
popplerRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-develRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-glib-develRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
Show 44 moreShow less
| Package | Affected | Fixed |
|---|---|---|
poppler-qtRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt-develRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt4Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt4-develRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-glibRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-utilsRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
popplerRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-develRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-glibRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-glib-develRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qtRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt-develRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt4Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt4-develRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-utilsRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
popplerRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-develRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-glib-develRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qtRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt-develRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt4Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt4-develRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-glibRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-utilsRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
popplerRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-develRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-glib-develRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qtRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt-develRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt4Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt4-develRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-glibRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-utilsRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
ipeUbuntu:16.04:LTS |
All versions, plus listed versions 7.1.4-2.17.1.8-17.1.10-17.1.10-1.1 |
None known |
ipeUbuntu:18.04:LTS |
All versions, plus listed versions 7.2.7-27.2.7-3 |
None known |
ipeUbuntu:20.04:LTS |
All versions, plus listed versions 7.2.9-17.2.13-27.2.13-2build1 |
None known |
ipeUbuntu:22.04:LTS |
All versions, plus listed versions 7.2.23+dfsg1-27.2.24+dfsg1-17.2.24+dfsg1-1build1 |
None known |
ipeUbuntu:24.04:LTS |
All versions, plus listed versions 7.2.27+dfsg1-27.2.28-27.2.28-2.1build27.2.28-2.1build37.2.28-2.1build4 |
None known |
ipeUbuntu:25.10 |
All versions, plus listed versions 7.2.30-1build1 |
None known |
ipeUbuntu:26.10 |
All versions, plus listed versions 7.2.30-1build27.2.30-2 |
None known |
ipeUbuntu:26.04:LTS |
All versions, plus listed versions 7.2.30-1build17.2.30-1build2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3703 is a medium vulnerability (CVSS 4.3) in Poppler, published October 13, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.56%, the 85th percentile. Fixed in poppler 0.12.4-1.2.
References
openwall.com/lists/oss-security/2010/10/04/6
lists.fedoraproject.org/pipermail/package-announce/2010-October/049392.html
redhat.com/support/errata/RHSA-2010-0859.html
secunia.com/advisories/42357
bugzilla.redhat.com/show_bug.cgi?id=639356
mandriva.com/security/advisories?name=MDVSA-2010:231
Show 24 moreShow less
slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.571720
ubuntu.com/usn/USN-1005-1
lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
cgit.freedesktop.org/poppler/poppler/commit?id=bf2055088a3a2d3bb3d3c37d464954ec1a25771f
nvd.nist.gov/vuln/detail/CVE-2010-3703
github.com/advisories/GHSA-qgg5-h322-m2xw
security-tracker.debian.org/tracker/CVE-2010-3703
access.redhat.com/errata/RHSA-2010:0859
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0859.json
cve.org/CVERecord?id=CVE-2010-3702
ubuntu.com/security/CVE-2010-3703