CVE-2011-2902

State: Published
Severity: Not scored
Published: Jan 30, 2018
Updated: Aug 6, 2024
Reserved: Jul 27, 2011

Description

zxpdf in xpdf before 3.02-19 as packaged in Debian unstable and 3.02-12+squeeze1 as packaged in Debian squeeze deletes temporary files insecurely, which allows remote attackers to delete arbitrary files via a crafted .pdf.gz file name.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

[oss-security] 20140208 Fwd: Old CVE ids, public, but stillmailing-list
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=635849
https://security-tracker.debian.org/tracker/CVE-2011-2902/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.