CVE:CVE-2010-3703
CNNVD:CNNVD-201011-037
poppler 是一种解析PDF格式文档的程序库。
poppler 0.8.7及0.15.1之前的其他版本，以及其他产品中的PDF解析器中的poppler/Function.cc文件中的PostScriptFunction::PostScriptFunction函数中存在输入验证漏洞。上下文攻击者可以借助能够触发未初始化指针解引用的PDF文件导致拒绝服务(崩溃)。
solution:Upgrade poppler poppler to a higher version than 0.8.7,0.9.0,0.9.1,0.9.2,0.9.3,0.10.0,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.10.7,0.11.0,0.11.1,0.11.2,0.11.3,0.12.0,0.12.1,0.12.2,0.12.3,0.12.4,0.13.0,0.13.1,0.13.2,0.13.3,0.13.4,0.14.0,0.14.1,0.14.2,0.14.3,0.14.4,0.14.5,0.15.0,0.15.1,and avoid the version 0.8.7,0.9.0,0.9.1,0.9.2,0.9.3,0.10.0,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.10.7,0.11.0,0.11.1,0.11.2,0.11.3,0.12.0,0.12.1,0.12.2,0.12.3,0.12.4,0.13.0,0.13.1,0.13.2,0.13.3,0.13.4,0.14.0,0.14.1,0.14.2,0.14.3,0.14.4,0.14.5,0.15.0,0.15.1