CVE:CVE-2013-4473
CNNVD:CNNVD-201310-651
Poppler是一个用于生成PDF的C++类库，该库是从Xpdf（PDF阅读器）继承而来。
Poppler 0.24.1及之前的版本中的utils/pdfseparate.cc文件中的‘extractPages’函数中存在基于栈的缓冲区溢出漏洞。远程攻击者可借助源文件名利用该漏洞造成拒绝服务，也可能执行任意代码。
solution:Upgrade freedesktop poppler to a higher version than 0.24.1,0.1,0.1.1,0.1.2,0.2.0,0.3.0,0.3.1,0.3.2,0.3.3,0.4.0,0.4.1,0.4.2,0.4.3,0.4.4,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.9,0.5.90,0.5.91,0.6.0,0.6.1,0.6.2,0.6.3,0.6.4,0.7.0,0.7.1,0.7.2,0.7.3,0.8.0,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.6,0.8.7,0.9.0,0.9.1,0.9.2,0.9.3,0.10.0,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.10.7,0.11.0,0.11.1,0.11.2,0.11.3,0.12.0,0.12.1,0.12.2,0.12.3,0.12.4,0.13.0,0.13.1,0.13.2,0.13.3,0.13.4,0.14.0,0.14.1,0.14.2,0.14.3,0.14.4,0.14.5,0.15.0,0.15.1,0.15.2,0.15.3,0.16.0,0.16.1,0.16.2,0.16.3,0.16.4,0.16.5,0.16.6,0.16.7,0.17.0,0.17.1,0.17.2,0.17.3,0.17.4,0.18.0,0.18.1,0.18.2,0.18.3,0.18.4,0.19.0,0.19.1,0.19.2,0.19.3,0.19.4,0.20.0,0.20.1,0.20.2,0.20.3,0.20.4,0.20.5,0.21.0,0.21.1,0.21.2,0.21.3,0.21.4,0.22.0,0.22.1,0.22.2,0.22.3,0.22.4,0.23.0,0.23.1,0.23.2,0.23.3,0.23.4,0.24.0,and avoid the version (,0.24.1],0.1,0.1.1,0.1.2,0.2.0,0.3.0,0.3.1,0.3.2,0.3.3,0.4.0,0.4.1,0.4.2,0.4.3,0.4.4,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.9,0.5.90,0.5.91,0.6.0,0.6.1,0.6.2,0.6.3,0.6.4,0.7.0,0.7.1,0.7.2,0.7.3,0.8.0,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.6,0.8.7,0.9.0,0.9.1,0.9.2,0.9.3,0.10.0,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.10.7,0.11.0,0.11.1,0.11.2,0.11.3,0.12.0,0.12.1,0.12.2,0.12.3,0.12.4,0.13.0,0.13.1,0.13.2,0.13.3,0.13.4,0.14.0,0.14.1,0.14.2,0.14.3,0.14.4,0.14.5,0.15.0,0.15.1,0.15.2,0.15.3,0.16.0,0.16.1,0.16.2,0.16.3,0.16.4,0.16.5,0.16.6,0.16.7,0.17.0,0.17.1,0.17.2,0.17.3,0.17.4,0.18.0,0.18.1,0.18.2,0.18.3,0.18.4,0.19.0,0.19.1,0.19.2,0.19.3,0.19.4,0.20.0,0.20.1,0.20.2,0.20.3,0.20.4,0.20.5,0.21.0,0.21.1,0.21.2,0.21.3,0.21.4,0.22.0,0.22.1,0.22.2,0.22.3,0.22.4,0.23.0,0.23.1,0.23.2,0.23.3,0.23.4,0.24.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,and avoid the version 12.04,14.04,15.10