CVE-2010-3704
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5,...
6.8 MediumFix available
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
Exploit likelihood
3.60%Down 0.1 points since Feb 4, 2022
What each source reports
NVD Score used
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
- Record
CVE-2010-3704- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
- Record
CVE-2010-3704- Updated
- 2026-11-02
EUVDEUVD-2010-3687 No score
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
- Record
EUVD-2010-3687- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fwg7-7mhm-4945 No score
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5,...
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
- Record
GHSA-fwg7-7mhm-4945- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
- Record
CVE-2010-3704- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-3704 No score
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
- Record
DEBIAN-CVE-2010-3704- Updated
- 2026-11-02
OSVUBUNTU-CVE-2010-3704 No score
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
- Record
UBUNTU-CVE-2010-3704- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
popplerDebian:12 |
before 0.12.4-1.2 | 0.12.4-1.2 |
popplerDebian:13 |
before 0.12.4-1.2 | 0.12.4-1.2 |
popplerDebian:14 |
before 0.12.4-1.2 | 0.12.4-1.2 |
xpdfDebian:12 |
before 3.02-9 | 3.02-9 |
xpdfDebian:13 |
before 3.02-9 | 3.02-9 |
xpdfDebian:14 |
before 3.02-9 | 3.02-9 |
popplerDebian:5.0 From an advisory covering 2 CVEs |
before 0.8.7-4, plus listed versions 0.8.7-10.8.7-20.8.7-30.8.7-3.1 |
0.8.7-4 |
xpdfDebian:5.0 From an advisory covering 2 CVEs |
before 3.02-1.4+lenny3, plus listed versions 3.02-1.43.02-1.4+lenny13.02-1.4+lenny2 |
3.02-1.4+lenny3 |
popplerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:0.5.4-4.4.el5_5.14 | 0:0.5.4-4.4.el5_5.14 |
poppler-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:0.5.4-4.4.el5_5.14 | 0:0.5.4-4.4.el5_5.14 |
Show 108 moreShow less
| Package | Affected | Fixed |
|---|---|---|
poppler-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:0.5.4-4.4.el5_5.14 | 0:0.5.4-4.4.el5_5.14 |
popplerRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:0.5.4-4.4.el5_5.14 | 0:0.5.4-4.4.el5_5.14 |
poppler-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:0.5.4-4.4.el5_5.14 | 0:0.5.4-4.4.el5_5.14 |
poppler-utilsRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:0.5.4-4.4.el5_5.14 | 0:0.5.4-4.4.el5_5.14 |
popplerRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:0.5.4-4.4.el5_5.14 | 0:0.5.4-4.4.el5_5.14 |
poppler-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:0.5.4-4.4.el5_5.14 | 0:0.5.4-4.4.el5_5.14 |
poppler-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:0.5.4-4.4.el5_5.14 | 0:0.5.4-4.4.el5_5.14 |
poppler-utilsRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:0.5.4-4.4.el5_5.14 | 0:0.5.4-4.4.el5_5.14 |
xpdfRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 1:3.00-24.el4_8.1 | 1:3.00-24.el4_8.1 |
xpdf-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 1:3.00-24.el4_8.1 | 1:3.00-24.el4_8.1 |
xpdfRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 1:3.00-24.el4_8.1 | 1:3.00-24.el4_8.1 |
xpdf-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 1:3.00-24.el4_8.1 | 1:3.00-24.el4_8.1 |
xpdfRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 1:3.00-24.el4_8.1 | 1:3.00-24.el4_8.1 |
xpdf-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 1:3.00-24.el4_8.1 | 1:3.00-24.el4_8.1 |
xpdfRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 1:3.00-24.el4_8.1 | 1:3.00-24.el4_8.1 |
xpdf-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 1:3.00-24.el4_8.1 | 1:3.00-24.el4_8.1 |
gpdfRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:2.8.2-7.7.2.el4_8.7 | 0:2.8.2-7.7.2.el4_8.7 |
gpdf-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:2.8.2-7.7.2.el4_8.7 | 0:2.8.2-7.7.2.el4_8.7 |
gpdfRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:2.8.2-7.7.2.el4_8.7 | 0:2.8.2-7.7.2.el4_8.7 |
gpdf-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:2.8.2-7.7.2.el4_8.7 | 0:2.8.2-7.7.2.el4_8.7 |
gpdfRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:2.8.2-7.7.2.el4_8.7 | 0:2.8.2-7.7.2.el4_8.7 |
gpdf-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:2.8.2-7.7.2.el4_8.7 | 0:2.8.2-7.7.2.el4_8.7 |
gpdfRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:2.8.2-7.7.2.el4_8.7 | 0:2.8.2-7.7.2.el4_8.7 |
gpdf-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:2.8.2-7.7.2.el4_8.7 | 0:2.8.2-7.7.2.el4_8.7 |
kdegraphicsRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 7:3.3.1-18.el4_8.1 | 7:3.3.1-18.el4_8.1 |
kdegraphics-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 7:3.3.1-18.el4_8.1 | 7:3.3.1-18.el4_8.1 |
kdegraphics-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 7:3.3.1-18.el4_8.1 | 7:3.3.1-18.el4_8.1 |
kdegraphicsRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 7:3.3.1-18.el4_8.1 | 7:3.3.1-18.el4_8.1 |
kdegraphics-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 7:3.3.1-18.el4_8.1 | 7:3.3.1-18.el4_8.1 |
kdegraphics-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 7:3.3.1-18.el4_8.1 | 7:3.3.1-18.el4_8.1 |
kdegraphicsRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 7:3.3.1-18.el4_8.1 | 7:3.3.1-18.el4_8.1 |
kdegraphics-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 7:3.3.1-18.el4_8.1 | 7:3.3.1-18.el4_8.1 |
kdegraphics-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 7:3.3.1-18.el4_8.1 | 7:3.3.1-18.el4_8.1 |
kdegraphicsRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 7:3.3.1-18.el4_8.1 | 7:3.3.1-18.el4_8.1 |
kdegraphics-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 7:3.3.1-18.el4_8.1 | 7:3.3.1-18.el4_8.1 |
kdegraphics-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 7:3.3.1-18.el4_8.1 | 7:3.3.1-18.el4_8.1 |
kdegraphicsRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 7:3.5.4-17.el5_5.1 | 7:3.5.4-17.el5_5.1 |
kdegraphics-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 7:3.5.4-17.el5_5.1 | 7:3.5.4-17.el5_5.1 |
kdegraphics-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 7:3.5.4-17.el5_5.1 | 7:3.5.4-17.el5_5.1 |
kdegraphicsRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 7:3.5.4-17.el5_5.1 | 7:3.5.4-17.el5_5.1 |
kdegraphics-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 7:3.5.4-17.el5_5.1 | 7:3.5.4-17.el5_5.1 |
kdegraphicsRed Hat:rhel_productivity:5 From an advisory covering 2 CVEs |
before 7:3.5.4-17.el5_5.1 | 7:3.5.4-17.el5_5.1 |
kdegraphics-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 2 CVEs |
before 7:3.5.4-17.el5_5.1 | 7:3.5.4-17.el5_5.1 |
kdegraphics-develRed Hat:rhel_productivity:5 From an advisory covering 2 CVEs |
before 7:3.5.4-17.el5_5.1 | 7:3.5.4-17.el5_5.1 |
popplerRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-develRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-glib-develRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qtRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt-develRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt4Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt4-develRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-glibRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-utilsRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
popplerRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-develRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-glibRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-glib-develRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qtRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt-develRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt4Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt4-develRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-utilsRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
popplerRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-develRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-glib-develRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qtRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt-develRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt4Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt4-develRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-glibRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-utilsRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
popplerRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-develRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-glib-develRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qtRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt-develRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt4Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-qt4-develRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-glibRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
poppler-utilsRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.12.4-3.el6_0.1 | 0:0.12.4-3.el6_0.1 |
tetexRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-afmRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-docRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-dvipsRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-fontsRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-latexRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-xdviRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetexRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-afmRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-docRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-dvipsRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-fontsRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-latexRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-xdviRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
ipeUbuntu:16.04:LTS |
All versions, plus listed versions 7.1.4-2.17.1.8-17.1.10-17.1.10-1.1 |
None known |
ipeUbuntu:18.04:LTS |
All versions, plus listed versions 7.2.7-27.2.7-3 |
None known |
ipeUbuntu:20.04:LTS |
All versions, plus listed versions 7.2.9-17.2.13-27.2.13-2build1 |
None known |
ipeUbuntu:22.04:LTS |
All versions, plus listed versions 7.2.23+dfsg1-27.2.24+dfsg1-17.2.24+dfsg1-1build1 |
None known |
ipeUbuntu:24.04:LTS |
All versions, plus listed versions 7.2.27+dfsg1-27.2.28-27.2.28-2.1build27.2.28-2.1build37.2.28-2.1build4 |
None known |
ipeUbuntu:25.10 |
All versions, plus listed versions 7.2.30-1build1 |
None known |
ipeUbuntu:26.10 |
All versions, plus listed versions 7.2.30-1build27.2.30-2 |
None known |
ipeUbuntu:26.04:LTS |
All versions, plus listed versions 7.2.30-1build17.2.30-1build2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3704 is a medium vulnerability (CVSS 6.8) in Foolabs Xpdf, published October 12, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.60%, the 89th percentile. Fixed in poppler 0.12.4-1.2.
References
lists.fedoraproject.org/pipermail/package-announce/2010-November/050285.html
openwall.com/lists/oss-security/2010/10/04/6
redhat.com/support/errata/RHSA-2010-0859.html
secunia.com/advisories/42357
mandriva.com/security/advisories?name=MDVSA-2010:228
Show 82 moreShow less
vupen.com/english/advisories/2011/0230
openoffice.org/security/cves/CVE-2010-3702_CVE-2010-3704.html
bugzilla.redhat.com/show_bug.cgi?id=638960
lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html
cgit.freedesktop.org/poppler/poppler/commit?id=39d140bfc0b8239bdd96d6a55842034ae5c05473
rhn.redhat.com/errata/RHSA-2012-1201.html
slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.571720
ubuntu.com/usn/USN-1005-1
debian.org/security/2010/dsa-2119
securityfocus.com/bid/43841
nvd.nist.gov/vuln/detail/CVE-2010-3704
github.com/advisories/GHSA-fwg7-7mhm-4945
security-tracker.debian.org/tracker/CVE-2010-3704
access.redhat.com/errata/RHSA-2010:0749
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0749.json
cve.org/CVERecord?id=CVE-2010-3702
ubuntu.com/security/CVE-2010-3704