In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document, as demonstrated by pdftocairo.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-glibUpgrade poppler-develUpgrade poppler-demosUpgrade poppler-debuginfoUpgrade poppler-qt-develUpgrade poppler-glib-develUpgrade poppler-qt | Apr 27, 2020 | Feb 3, 2019 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Feb 2, 2019 |
| Centos_linux | — | Upgrade poppler-glibUpgrade poppler-debuginfoUpgrade okular-debuginfoUpgrade poppler-qt5-debuginfoUpgrade evince-nautilusUpgrade evince-browser-pluginUpgrade evince-dviUpgrade okularUpgrade popplerUpgrade poppler-debugsourceUpgrade okular-develUpgrade poppler-cppUpgrade poppler-qtUpgrade poppler-glib-develUpgrade evince-libsUpgrade evince-develUpgrade okular-libsUpgrade poppler-glib-debuginfoUpgrade poppler-utils-debuginfoUpgrade poppler-develUpgrade poppler-cpp-develUpgrade okular-partUpgrade evinceUpgrade poppler-demosUpgrade poppler-cpp-debuginfoUpgrade poppler-qt-develUpgrade poppler-utilsUpgrade evince-debuginfo | Aug 28, 2019 | Feb 3, 2019 |
| Debian | — | Upgrade poppler | Mar 12, 2019 | Feb 2, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-utilsUpgrade poppler-qt | Feb 22, 2019 | Feb 2, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade popplerUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-qt | Mar 27, 2019 | Feb 2, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade popplerUpgrade poppler-glib | Mar 11, 2019 | Feb 2, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-utilsUpgrade poppler-glibUpgrade popplerUpgrade poppler-qt | Aug 31, 2020 | Feb 3, 2019 |
| Huawei Euleros 2_0_sp9 | — | Upgrade poppler-helpUpgrade popplerUpgrade poppler-cpp | Feb 8, 2021 | Feb 3, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.75.0-11.4.10.0.1.2.0 on Solaris 11.4 | Jun 26, 2019 | Feb 3, 2019 |
| Oracle_linux | — | Upgrade poppler-qt5-develUpgrade evince-develUpgrade okular-develUpgrade poppler-cpp-develUpgrade poppler-glib-develUpgrade evince-nautilusUpgrade poppler-utilsUpgrade poppler-cppUpgrade poppler-qtUpgrade okular-partUpgrade poppler-demosUpgrade poppler-develUpgrade evince-browser-pluginUpgrade evince-libsUpgrade poppler-qt-develUpgrade poppler-qt5Upgrade poppler-glibUpgrade popplerUpgrade okular-libsUpgrade evinceUpgrade okularUpgrade evince-dvi | Jul 21, 2020 | Feb 1, 2019 |
| Redhat_linux | — | Upgrade okular-debuginfoUpgrade okularUpgrade poppler-cpp-debuginfoUpgrade poppler-debuginfoUpgrade evince-browser-pluginUpgrade poppler-qt5Upgrade okular-partUpgrade okular-libsUpgrade poppler-qt5-debuginfoUpgrade evince-nautilusUpgrade poppler-qt5-develUpgrade poppler-demosUpgrade okular-develUpgrade evince-libsUpgrade poppler-develUpgrade poppler-glibUpgrade popplerUpgrade poppler-debugsourceUpgrade evinceUpgrade poppler-glib-develUpgrade poppler-utils-debuginfoUpgrade poppler-glib-debuginfoUpgrade poppler-qtUpgrade evince-dviUpgrade evince-develUpgrade poppler-utilsUpgrade evince-debuginfoUpgrade poppler-cpp-develUpgrade poppler-qt-develUpgrade poppler-cpp | Aug 7, 2019 | Feb 3, 2019 |
| Suse | — | Upgrade libpoppler-cpp0Upgrade libpoppler73-32bitUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade poppler-toolsUpgrade libpoppler73Upgrade libpoppler-glib8 | Dec 2, 2021 | Feb 2, 2019 |
| Ubuntu | — | Upgrade libpoppler58Upgrade libpoppler73Upgrade libpoppler79Upgrade poppler-utilsUpgrade libpoppler44 | Feb 16, 2019 | Feb 2, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub