{"id":"CVE-2013-4472","aliases":["DEBIAN-CVE-2013-4472","EUVD-2013-4340","GHSA-6g5q-pc77-85j9"],"status":"published","title":"The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on...","description":"The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.","severity":{"version":"2.0","score":3.3,"vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00367,"percentile":0.30719,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-59"],"published":"2014-04-22T14:00:00Z","modified":"2026-09-01T20:03:18Z","affected":[{"source":"osv","ecosystem":"Debian:12","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["22.12.0-2","22.12.0-2+deb12u1","22.12.0-2+deb12u2","22.12.0-2+deb12u3","22.12.0-2.1","22.12.0-2.2","23.08.0-1","23.08.0-2","23.12.0-1","24.02.0-1","24.02.0-2","24.02.0-3","24.02.0-4","24.02.0-5","24.02.0-5+loong64","24.06.0-1","24.06.0-2","24.08.0-1","24.08.0-2","24.08.0-3","24.08.0-4","25.01.0-1","25.01.0-2","25.01.0-3","25.01.0-4","25.01.0-5","25.03.0-1","25.03.0-10","25.03.0-11","25.03.0-11.1","25.03.0-2","25.03.0-3","25.03.0-4","25.03.0-5","25.03.0-6","25.03.0-7","25.03.0-9","26.01.0-1","26.01.0-2","26.01.0-3","26.01.0-4","26.01.0-4.1","26.01.0-5","26.07.0-1","26.07.0-2"]},{"source":"osv","ecosystem":"Debian:13","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.03.0-10","25.03.0-11","25.03.0-11.1","25.03.0-5","25.03.0-5+deb13u2","25.03.0-5+deb13u3","25.03.0-5+deb13u4","25.03.0-6","25.03.0-7","25.03.0-9","26.01.0-1","26.01.0-2","26.01.0-3","26.01.0-4","26.01.0-4.1","26.01.0-5","26.07.0-1","26.07.0-2"]},{"source":"osv","ecosystem":"Debian:14","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.03.0-10","25.03.0-11","25.03.0-11.1","25.03.0-5","25.03.0-6","25.03.0-7","25.03.0-9","26.01.0-1","26.01.0-2","26.01.0-3","26.01.0-4","26.01.0-4.1","26.01.0-5","26.07.0-1","26.07.0-2"]},{"source":"osv","ecosystem":"Debian:12","package":"xpdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.04+git20220601-1","3.04+git20231213-1","3.04+git20240118-1","3.04+git20240124-1","3.04+git20240202-1","3.04+git20240613-1","3.04+git20250103-1","3.04+git20250304-1","3.04+git20260220-1","3.04+git20260802-1"]},{"source":"osv","ecosystem":"Debian:13","package":"xpdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.04+git20250304-1","3.04+git20260220-1","3.04+git20260802-1"]},{"source":"osv","ecosystem":"Debian:14","package":"xpdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.04+git20250304-1","3.04+git20260220-1","3.04+git20260802-1"]}],"products":[{"vendor":"freedesktop","product":"poppler"}],"references":[{"url":"http://seclists.org/oss-sec/2013/q4/183","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://osvdb.org/99064","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://seclists.org/oss-sec/2013/q4/181","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://poppler.freedesktop.org/releases.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4472"},{"url":"https://github.com/advisories/GHSA-6g5q-pc77-85j9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-4472","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2013-4472","description":"The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.","status":"published","published":"2014-04-22T14:00:00Z","modified":"2024-08-06T16:45:14.839Z","updated_at":"2026-11-02T14:34:58.193873Z"}],"euvd":[{"id":"EUVD-2013-4340","description":"The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.","status":"published","published":"2014-04-22T14:00:00Z","modified":"2024-08-06T16:45:14Z","updated_at":"2026-11-03T01:56:31.667445Z"}],"ghsa":[{"id":"GHSA-6g5q-pc77-85j9","title":"The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on...","description":"The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.","status":"published","published":"2022-05-17T04:46:05Z","modified":"2023-01-28T05:02:22Z","cwes":["CWE-59"],"updated_at":"2026-11-02T14:43:45.797636Z"}],"nvd":[{"id":"CVE-2013-4472","description":"The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.","status":"published","published":"2014-04-22T14:23:34.66Z","modified":"2026-06-16T23:57:17.34Z","cvss":[{"version":"2.0","score":3.3,"vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:02:50.049023Z"}],"osv":[{"id":"CVE-2013-4472","description":"The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.","status":"published","published":"2014-04-22T14:23:34Z","modified":"2026-04-10T03:44:31.081367Z","updated_at":"2026-11-02T15:43:59.09154Z"},{"id":"DEBIAN-CVE-2013-4472","description":"The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.","status":"published","published":"2014-04-22T14:23:34.66Z","modified":"2026-09-01T20:03:18.405766888Z","updated_at":"2026-11-02T15:45:25.514579Z"}]}}