A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' program, would crash the application causing a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade poppler-develUpgrade poppler-cpp-develUpgrade evince-develUpgrade poppler-qt5-develUpgrade poppler-cppUpgrade poppler-glib-develUpgrade poppler-qt5 | May 4, 2022 | Dec 3, 2020 |
| Alpine Linux | — | Upgrade poppler | Mar 26, 2024 | Dec 3, 2020 |
| Centos_linux | — | Upgrade poppler-qt5-debuginfoUpgrade evince-browser-pluginUpgrade poppler-debugsourceUpgrade evince-nautilusUpgrade poppler-debuginfoUpgrade evince-libsUpgrade poppler-cpp-debuginfoUpgrade poppler-utilsUpgrade evince-debugsourceUpgrade evince-libs-debuginfoUpgrade popplerUpgrade evince-debuginfoUpgrade poppler-glibUpgrade evinceUpgrade poppler-utils-debuginfoUpgrade evince-nautilus-debuginfoUpgrade poppler-glib-debuginfoUpgrade evince-browser-plugin-debuginfo | Jun 1, 2021 | Dec 3, 2020 |
| Debian | — | Upgrade poppler | Sep 27, 2022 | Dec 3, 2020 |
| Huawei Euleros 2_0_sp10 | — | Upgrade popplerUpgrade poppler-cppUpgrade poppler-help | Feb 28, 2022 | Dec 3, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade popplerUpgrade poppler-glib | Oct 28, 2022 | Dec 3, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler | Jun 17, 2022 | Dec 3, 2020 |
| Oracle_linux | — | Upgrade poppler-cpp-develUpgrade evince-libsUpgrade poppler-develUpgrade poppler-utilsUpgrade evince-nautilusUpgrade evince-browser-pluginUpgrade poppler-qt5Upgrade poppler-cppUpgrade poppler-qt5-develUpgrade evinceUpgrade evince-develUpgrade popplerUpgrade poppler-glib-develUpgrade poppler-glib | May 26, 2021 | Mar 22, 2019 |
| Redhat_linux | — | Upgrade evince-debuginfoUpgrade evince-develUpgrade evince-libs-debuginfoNo solution existsUpgrade poppler-glib-debuginfoUpgrade evinceUpgrade poppler-cpp-develUpgrade poppler-glib-develUpgrade poppler-cppUpgrade popplerUpgrade evince-nautilus-debuginfoUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-debugsourceUpgrade evince-browser-plugin-debuginfoUpgrade poppler-utils-debuginfoUpgrade poppler-qt5-develUpgrade poppler-develUpgrade poppler-qt5-debuginfoUpgrade evince-nautilusUpgrade poppler-qt5Upgrade evince-libsUpgrade poppler-debuginfoUpgrade evince-debugsourceUpgrade poppler-cpp-debuginfoUpgrade evince-browser-plugin | May 21, 2021 | Dec 3, 2020 |
| Rocky_linux | — | Upgrade poppler-debugsourceUpgrade poppler-qt5Upgrade evince-debuginfoUpgrade popplerUpgrade poppler-glibUpgrade poppler-qt5-develUpgrade poppler-utils-debuginfoUpgrade poppler-develUpgrade poppler-debuginfoUpgrade evinceUpgrade evince-libsUpgrade evince-browser-pluginUpgrade evince-nautilus-debuginfoUpgrade evince-nautilusUpgrade poppler-cpp-debuginfoUpgrade poppler-utilsUpgrade evince-libs-debuginfoUpgrade poppler-glib-develUpgrade poppler-cppUpgrade evince-develUpgrade evince-debugsourceUpgrade poppler-glib-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade poppler-cpp-develUpgrade poppler-qt5-debuginfo | Mar 12, 2024 | Dec 3, 2020 |
| Suse | — | Upgrade poppler-toolsUpgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade libpoppler73-32bitUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib8Upgrade libpoppler73Upgrade libpoppler-cpp0 | Dec 2, 2021 | Nov 25, 2020 |
| Ubuntu | — | Upgrade poppler-utilsUpgrade libpoppler58Upgrade libpoppler73 | Nov 27, 2020 | Nov 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub