ByteOS Network

NVD Vulnerability Details :

CVE-2013-4472

Deferred

Source-secalert@redhat.com

Published At-22 Apr, 2014 | 14:23

Updated At-12 Apr, 2025 | 10:46

The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	3.3	LOW	AV:L/AC:M/Au:N/C:N/I:P/A:P

CPE Matches

freedesktop.org

>>poppler>>Versions up to 0.24.3(inclusive)

cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*

freedesktop.org

>>poppler>>0.24.0

cpe:2.3:a:freedesktop:poppler:0.24.0:*:*:*:*:*:*:*

freedesktop.org

>>poppler>>0.24.1

cpe:2.3:a:freedesktop:poppler:0.24.1:*:*:*:*:*:*:*

freedesktop.org

>>poppler>>0.24.2

cpe:2.3:a:freedesktop:poppler:0.24.2:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-59	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://osvdb.org/99064	secalert@redhat.com	N/A
http://poppler.freedesktop.org/releases.html	secalert@redhat.com	N/A
http://seclists.org/oss-sec/2013/q4/181	secalert@redhat.com	N/A
http://seclists.org/oss-sec/2013/q4/183	secalert@redhat.com	N/A
http://osvdb.org/99064	af854a3a-2127-422b-91ae-364da2661108	N/A
http://poppler.freedesktop.org/releases.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://seclists.org/oss-sec/2013/q4/181	af854a3a-2127-422b-91ae-364da2661108	N/A
http://seclists.org/oss-sec/2013/q4/183	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History