CVE-2010-3704
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
- EPSS
- 3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- foolabs:xpdf
- glyphandcog:xpdfreader
- kde:kdegraphics
- poppler:poppler
References
- ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl5.patch
- http://cgit.freedesktop.org/poppler/poppler/commit/?id=39d140bfc0b8239bdd96d6a55842034ae5c05473
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050268.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050285.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050390.html