In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-glib-develUpgrade poppler-cpp-develUpgrade poppler-develUpgrade poppler-demosUpgrade poppler-cppUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-debuginfoUpgrade poppler-qt-develUpgrade poppler | Aug 25, 2020 | May 23, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | May 23, 2019 |
| Centos_linux | — | Upgrade poppler-debuginfoUpgrade poppler-develUpgrade poppler-cpp-debuginfoUpgrade poppler-demosUpgrade evince-browser-pluginUpgrade poppler-qt5-debuginfoUpgrade poppler-utilsUpgrade evince-libsUpgrade evince-nautilusUpgrade poppler-qt-develUpgrade popplerUpgrade poppler-cppUpgrade poppler-utils-debuginfoUpgrade poppler-glibUpgrade evince-debuginfoUpgrade poppler-glib-develUpgrade poppler-cpp-develUpgrade evince-dviUpgrade poppler-glib-debuginfoUpgrade poppler-qtUpgrade poppler-debugsourceUpgrade evinceUpgrade evince-devel | Sep 12, 2019 | May 23, 2019 |
| Debian | — | Upgrade poppler | Jun 7, 2019 | May 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-utilsUpgrade poppler-qt | Feb 22, 2021 | May 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-qtUpgrade poppler-utils | Jan 20, 2021 | May 23, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-qtUpgrade poppler-utils | Dec 16, 2020 | May 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler | Aug 31, 2020 | May 23, 2019 |
| Huawei Euleros 2_0_sp9 | — | Upgrade poppler-cppUpgrade poppler | Nov 3, 2020 | May 23, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.79.0-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | May 23, 2019 |
| Oracle_linux | — | Upgrade poppler-qtUpgrade evince-browser-pluginUpgrade poppler-glibUpgrade poppler-demosUpgrade evince-dviUpgrade poppler-cpp-develUpgrade evince-nautilusUpgrade poppler-utilsUpgrade evince-libsUpgrade evince-develUpgrade poppler-glib-develUpgrade poppler-qt5-develUpgrade poppler-cppUpgrade evinceUpgrade poppler-qt5Upgrade popplerUpgrade poppler-develUpgrade poppler-qt-devel | Jul 21, 2020 | May 23, 2019 |
| Redhat_linux | — | Upgrade poppler-qt5-debuginfoUpgrade poppler-qt5Upgrade evince-develUpgrade poppler-qtUpgrade evince-browser-pluginUpgrade poppler-cpp-develUpgrade poppler-debugsourceUpgrade poppler-qt5-develUpgrade poppler-utilsNo solution existsUpgrade poppler-cppUpgrade poppler-glib-develUpgrade evince-nautilusUpgrade evince-dviUpgrade poppler-develUpgrade poppler-glib-debuginfoUpgrade poppler-glibUpgrade poppler-cpp-debuginfoUpgrade evince-debuginfoUpgrade poppler-qt-develUpgrade evinceUpgrade poppler-utils-debuginfoUpgrade evince-libsUpgrade poppler-demosUpgrade poppler-debuginfoUpgrade poppler | Sep 12, 2019 | May 23, 2019 |
| Suse | — | Upgrade libpoppler-qt4-develUpgrade libpoppler-qt4-4Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade poppler-toolsUpgrade libpoppler73-32bitUpgrade libpoppler73Upgrade libpoppler-cpp0Upgrade libpoppler-glib8Upgrade libpoppler60 | Aug 9, 2024 | May 23, 2019 |
| Ubuntu | — | Upgrade poppler-utilsUpgrade libpoppler58Upgrade libpoppler85Upgrade libpoppler79Upgrade libpoppler73 | Jun 27, 2019 | May 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub