CVE-2010-2575
Heap-based buffer overflow in the RLE decompression functionality in the...
Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file.
- Record
CVE-2010-2575- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file.
- Record
CVE-2010-2575- Updated
- 2026-11-02
EUVDEUVD-2010-2579 No score
Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file.
- Record
EUVD-2010-2579- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gp5q-hh2p-748v No score
Heap-based buffer overflow in the RLE decompression functionality in the...
Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file.
- Record
GHSA-gp5q-hh2p-748v- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file.
- Record
CVE-2010-2575- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-2575 No score
Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file.
- Record
DEBIAN-CVE-2010-2575- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2575 is a medium vulnerability (CVSS 6.8) in Kde Sc, published August 30, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.65%, the 91st percentile. Fixed in okular 4:4.4.5-2.
References
ubuntu.com/usn/USN-979-1
vupen.com/english/advisories/2010/2178
secunia.com/advisories/41132
kde.org/info/security/advisory-20100825-1.txt
Show 19 moreShow less
securityfocus.com/archive/1/513341/100/0/threaded
lists.fedoraproject.org/pipermail/package-announce/2010-August/046542.html
slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.340142
exchange.xforce.ibmcloud.com/vulnerabilities/61371
mandriva.com/security/advisories?name=MDVSA-2010:162
osvdb.org/67454
lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
bugzilla.redhat.com/show_bug.cgi?id=627289
nvd.nist.gov/vuln/detail/CVE-2010-2575
github.com/advisories/GHSA-gp5q-hh2p-748v
security-tracker.debian.org/tracker/CVE-2010-2575