Vulnerability Database

289,689

Total vulnerabilities in the database

CVE-2013-4472

The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

  • Published: Apr 22, 2014
  • Updated: Apr 13, 2023
  • CVE: CVE-2013-4472
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 3.3
  • AV:L/AC:M/Au:N/C:N/I:P/A:P

CWEs:

Software From Fixed in
freedesktop / poppler 0.24.1 0.24.1.x
freedesktop / poppler 0.24.0 0.24.0.x
freedesktop / poppler - 0.24.3.x
freedesktop / poppler 0.24.2 0.24.2.x