In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-debuginfoUpgrade poppler-glibUpgrade poppler-demosUpgrade poppler-qtUpgrade poppler-glib-develUpgrade poppler-develUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade popplerUpgrade poppler-qt-develUpgrade poppler-cpp | Apr 27, 2020 | Jan 3, 2019 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Jan 3, 2019 |
| Centos_linux | — | Upgrade poppler-glib-debuginfoUpgrade poppler-cppUpgrade okular-debuginfoUpgrade evince-dviUpgrade popplerUpgrade okularUpgrade poppler-qt-develUpgrade poppler-debugsourceUpgrade poppler-utils-debuginfoUpgrade evince-debuginfoUpgrade poppler-glib-develUpgrade okular-libsUpgrade evinceUpgrade poppler-glibUpgrade evince-develUpgrade evince-browser-pluginUpgrade poppler-qtUpgrade poppler-cpp-develUpgrade poppler-cpp-debuginfoUpgrade poppler-develUpgrade okular-develUpgrade poppler-demosUpgrade okular-partUpgrade evince-libsUpgrade poppler-qt5-debuginfoUpgrade evince-nautilusUpgrade poppler-debuginfoUpgrade poppler-utils | Aug 28, 2019 | Jan 3, 2019 |
| Debian | — | Upgrade poppler | Mar 12, 2019 | Jan 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade popplerUpgrade poppler-glib | Sep 16, 2021 | Jan 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler | Nov 19, 2019 | Jan 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-qtUpgrade poppler-glibUpgrade popplerUpgrade poppler-utils | Nov 19, 2019 | Jan 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-qtUpgrade popplerUpgrade poppler-glibUpgrade poppler-utils | Aug 28, 2019 | Jan 3, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.75.0-11.4.10.0.1.2.0 on Solaris 11.4 | Jun 26, 2019 | Jan 3, 2019 |
| Oracle_linux | — | Upgrade poppler-qt5-develUpgrade okular-develUpgrade okular-libsUpgrade poppler-qt5Upgrade okularUpgrade poppler-demosUpgrade poppler-develUpgrade okular-partUpgrade evince-browser-pluginUpgrade evince-libsUpgrade evince-nautilusUpgrade evince-develUpgrade poppler-qtUpgrade poppler-glib-develUpgrade poppler-cppUpgrade evinceUpgrade poppler-glibUpgrade evince-dviUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade popplerUpgrade poppler-qt-devel | Jul 21, 2020 | Dec 30, 2018 |
| Redhat_linux | — | Upgrade evince-libsUpgrade poppler-qt5-develUpgrade evince-nautilusUpgrade poppler-cpp-debuginfoUpgrade poppler-qt5-debuginfoUpgrade poppler-develUpgrade okular-develUpgrade evince-browser-pluginUpgrade okular-debuginfoUpgrade poppler-utilsUpgrade poppler-qt5Upgrade okular-partUpgrade poppler-demosUpgrade poppler-debuginfoUpgrade popplerUpgrade poppler-glibUpgrade evinceUpgrade poppler-utils-debuginfoUpgrade poppler-qtNo solution existsUpgrade evince-dviUpgrade poppler-glib-develUpgrade evince-debuginfoUpgrade okular-libsUpgrade poppler-debugsourceUpgrade okularUpgrade poppler-cpp-develUpgrade poppler-qt-develUpgrade poppler-glib-debuginfoUpgrade evince-develUpgrade poppler-cpp | Aug 7, 2019 | Jan 3, 2019 |
| Suse | — | Upgrade libpoppler-glib-develUpgrade libpoppler-develUpgrade libpoppler73-32bitUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler73Upgrade libpoppler-glib8Upgrade poppler-toolsUpgrade libpoppler-cpp0 | Dec 2, 2021 | Jan 3, 2019 |
| Ubuntu | — | Upgrade libpoppler58Upgrade libpoppler79Upgrade libpoppler85Upgrade libpoppler73Upgrade poppler-utils | Jun 27, 2019 | Jan 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub