cve/2011/CVE-2011-2902.md
2024-05-26 14:27:05 +02:00

724 B

CVE-2011-2902

Description

zxpdf in xpdf before 3.02-19 as packaged in Debian unstable and 3.02-12+squeeze1 as packaged in Debian squeeze deletes temporary files insecurely, which allows remote attackers to delete arbitrary files via a crafted .pdf.gz file name.

POC

Reference

No PoCs from references.

Github