CVE-2010-3704

CVE-2010-3704 describes a denial-of-service and potential arbitrary code execution vulnerability in the FoFiType1::parse function of PDF parsers like xpdf, poppler, and kdegraphics. An attacker could exploit this by crafting a malicious PDF with a negative array index in a PostScript Type1 font, bypassing input validation and causing memory corruption. With a CVSS score of 6.8, this vulnerability is of medium severity, requiring user interaction (opening a malicious PDF) for exploitation, and could lead to a crash or compromise of the affected system. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.