The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.
2010-11-05T18:00:25.983
2025-04-11T00:51:21.963
Deferred
CVSSv2: 6.8 (MEDIUM)
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.6
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | poppler | poppler | 0.8.7 | Yes |
| Application | poppler | poppler | 0.9.0 | Yes |
| Application | poppler | poppler | 0.9.1 | Yes |
| Application | poppler | poppler | 0.9.2 | Yes |
| Application | poppler | poppler | 0.9.3 | Yes |
| Application | poppler | poppler | 0.10.0 | Yes |
| Application | poppler | poppler | 0.10.1 | Yes |
| Application | poppler | poppler | 0.10.2 | Yes |
| Application | poppler | poppler | 0.10.3 | Yes |
| Application | poppler | poppler | 0.10.4 | Yes |
| Application | poppler | poppler | 0.10.5 | Yes |
| Application | poppler | poppler | 0.10.6 | Yes |
| Application | poppler | poppler | 0.10.7 | Yes |
| Application | poppler | poppler | 0.11.0 | Yes |
| Application | poppler | poppler | 0.11.1 | Yes |
| Application | poppler | poppler | 0.11.2 | Yes |
| Application | poppler | poppler | 0.11.3 | Yes |
| Application | poppler | poppler | 0.12.0 | Yes |
| Application | poppler | poppler | 0.12.1 | Yes |
| Application | poppler | poppler | 0.12.2 | Yes |
| Application | poppler | poppler | 0.12.3 | Yes |
| Application | poppler | poppler | 0.12.4 | Yes |
| Application | poppler | poppler | 0.13.0 | Yes |
| Application | poppler | poppler | 0.13.1 | Yes |
| Application | poppler | poppler | 0.13.2 | Yes |
| Application | poppler | poppler | 0.13.3 | Yes |
| Application | poppler | poppler | 0.13.4 | Yes |
| Application | poppler | poppler | 0.14.0 | Yes |
| Application | poppler | poppler | 0.14.1 | Yes |
| Application | poppler | poppler | 0.14.2 | Yes |
| Application | poppler | poppler | 0.14.3 | Yes |
| Application | poppler | poppler | 0.14.4 | Yes |
| Application | poppler | poppler | 0.14.5 | Yes |
| Application | poppler | poppler | 0.15.0 | Yes |
| Application | poppler | poppler | 0.15.1 | Yes |
| Application | foolabs | xpdf | 0.5a | Yes |
| Application | foolabs | xpdf | 0.7a | Yes |
| Application | foolabs | xpdf | 0.91a | Yes |
| Application | foolabs | xpdf | 0.91b | Yes |
| Application | foolabs | xpdf | 0.91c | Yes |
| Application | foolabs | xpdf | 0.92a | Yes |
| Application | foolabs | xpdf | 0.92b | Yes |
| Application | foolabs | xpdf | 0.92c | Yes |
| Application | foolabs | xpdf | 0.92d | Yes |
| Application | foolabs | xpdf | 0.92e | Yes |
| Application | foolabs | xpdf | 0.93a | Yes |
| Application | foolabs | xpdf | 0.93b | Yes |
| Application | foolabs | xpdf | 0.93c | Yes |
| Application | foolabs | xpdf | 1.00a | Yes |
| Application | foolabs | xpdf | 3.0.1 | Yes |
| Application | foolabs | xpdf | 3.02pl1 | Yes |
| Application | foolabs | xpdf | 3.02pl2 | Yes |
| Application | foolabs | xpdf | 3.02pl3 | Yes |
| Application | glyphandcog | xpdfreader | ≤ 3.02 | Yes |
| Application | glyphandcog | xpdfreader | 0.2 | Yes |
| Application | glyphandcog | xpdfreader | 0.3 | Yes |
| Application | glyphandcog | xpdfreader | 0.4 | Yes |
| Application | glyphandcog | xpdfreader | 0.5 | Yes |
| Application | glyphandcog | xpdfreader | 0.6 | Yes |
| Application | glyphandcog | xpdfreader | 0.7 | Yes |
| Application | glyphandcog | xpdfreader | 0.80 | Yes |
| Application | glyphandcog | xpdfreader | 0.90 | Yes |
| Application | glyphandcog | xpdfreader | 0.91 | Yes |
| Application | glyphandcog | xpdfreader | 0.92 | Yes |
| Application | glyphandcog | xpdfreader | 0.93 | Yes |
| Application | glyphandcog | xpdfreader | 1.00 | Yes |
| Application | glyphandcog | xpdfreader | 1.01 | Yes |
| Application | glyphandcog | xpdfreader | 2.00 | Yes |
| Application | glyphandcog | xpdfreader | 2.01 | Yes |
| Application | glyphandcog | xpdfreader | 2.02 | Yes |
| Application | glyphandcog | xpdfreader | 2.03 | Yes |
| Application | glyphandcog | xpdfreader | 3.00 | Yes |
| Application | glyphandcog | xpdfreader | 3.01 | Yes |
| Application | glyphandcog | xpdfreader | 3.02 | Yes |
| Application | kde | kdegraphics | * | Yes |