CVE-2013-4474
N/A
Published: November 23, 2013 at 11:00 AM UTC
Updated: June 16, 2026 at 11:57 PM UTC
2 products affected across 2 vendorsUbuntu LinuxPoppler
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 10%
Description
Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service (crash) via format string specifiers in a destination filename.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
Ubuntu Linux· Canonicalrubygems
95%v ≤ 0.24.10.10.1.10.1.20.10.00.10.10.10.20.10.30.10.40.10.50.10.60.10.70.11.00.11.10.11.20.11.30.12.00.12.10.12.20.12.30.12.40.13.00.13.10.13.20.13.30.13.40.14.00.14.10.14.20.14.30.14.40.14.50.15.00.15.10.15.20.15.30.16.00.16.10.16.20.16.30.16.40.16.50.16.60.16.70.17.00.17.10.17.20.17.30.17.40.18.00.18.10.18.20.18.30.18.40.19.00.19.10.19.20.19.30.19.40.2.00.20.00.20.10.20.20.20.30.20.40.20.50.21.00.21.10.21.20.21.30.21.40.22.00.22.10.22.20.22.30.22.40.23.00.23.10.23.20.23.30.23.40.24.00.3.00.3.10.3.20.3.30.4.00.4.10.4.20.4.30.4.40.5.00.5.10.5.20.5.30.5.40.5.90.5.900.5.910.6.00.6.10.6.20.6.30.6.40.7.00.7.10.7.20.7.30.8.00.8.10.8.20.8.30.8.40.8.50.8.60.8.70.9.00.9.10.9.20.9.3
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (8)
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://cgit.freedesktop.org/poppler/poppler/commit/?id=61f79b8447c3ac8ab5a26e79e0c28053ffdccf75Vendor Advisoryx_refsource_GENTOO
Source: [email protected]
http://security.gentoo.org/glsa/glsa-201401-21.xmlMailing Listx_refsource_MLIST
Source: [email protected]
http://www.openwall.com/lists/oss-security/2013/10/29/1x_refsource_CONFIRMVendor Advisory
Source: [email protected]
https://bugs.freedesktop.org/show_bug.cgi?id=69434Quick Info
StatusMODIFIED
CWE
CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card