CVE:CVE-2010-3702
CNNVD:CNNVD-201011-038
xpdf 3.02pl5之前版本，poppler 0.8.7，0.15.1及之前的其他版本，kdegraphics及其他产品中的PDF解析器中的Gfx::getPos函数中存在输入验证漏洞。上下文攻击者可借助能够触发未初始化指针解引用的未知向量导致拒绝服务(崩溃)。
solution:Upgrade apple cups to a higher version than 1.3.11,and avoid the version (,1.3.11]; Upgrade freedesktop poppler to a higher version than 0.15.1,and avoid the version [0.8.7,0.15.1]; Upgrade xpdfreader xpdf to a higher version than 3.01,3.02,3.02:pl1,3.02:pl2,3.02:pl3,3.02:pl4,and avoid the version (,3.01],3.02,3.02:pl1,3.02:pl2,3.02:pl3,3.02:pl4; Upgrade fedoraproject fedora to a higher version than 12,13,14,and avoid the version 12,13,14; Upgrade opensuse opensuse to a higher version than 11.1,11.2,11.3,and avoid the version 11.1,11.2,11.3; Upgrade suse linux_enterprise_server to a higher version than 9,10:sp3,11,11:sp1,and avoid the version 9,10:sp3,11,11:sp1; Upgrade debian debian_linux to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_server to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,and avoid the version 5.0; Upgrade canonical ubuntu_linux to a higher version than 6.06,8.04,9.04,9.10,10.04,10.10,and avoid the version 6.06,8.04,9.04,9.10,10.04,10.10