Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade poppler | Sep 30, 2017 | Jun 22, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 22, 2017 |
| Centos_linux | — | Upgrade poppler-demosUpgrade poppler-debuginfoUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qtUpgrade popplerUpgrade poppler-glib-develUpgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-cppUpgrade poppler-qt4-develUpgrade poppler-qt4Upgrade poppler-cpp-devel | Sep 1, 2017 | Jun 22, 2017 |
| Debian | — | Upgrade poppler | Jan 9, 2018 | Jun 22, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler | Nov 30, 2017 | Jun 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler | Nov 30, 2017 | Jun 22, 2017 |
| Oracle_linux | — | Upgrade popplerUpgrade poppler-cpp-develUpgrade poppler-qt4Upgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-qt4-develUpgrade poppler-cppUpgrade poppler-glib-develUpgrade poppler-demos | Aug 31, 2017 | Jun 21, 2017 |
| Redhat_linux | — | Upgrade poppler-debuginfoNo solution existsUpgrade popplerUpgrade poppler-demosUpgrade poppler-qt-develUpgrade poppler-utilsUpgrade poppler-develUpgrade poppler-qt4-develUpgrade poppler-glib-develUpgrade poppler-glibUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-qt4Upgrade poppler-qt | Aug 31, 2017 | Jun 22, 2017 |
| Suse | — | Upgrade libpoppler44Upgrade libpoppler-glib-develUpgrade libpoppler-qt4-develUpgrade libpoppler-glib8Upgrade libpoppler-develUpgrade libpoppler-qt4-4Upgrade poppler-toolsUpgrade libpoppler-cpp0Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler60 | Jul 28, 2017 | Jun 22, 2017 |
| Ubuntu | — | Upgrade libpoppler44Upgrade libpoppler64Upgrade poppler-utilsUpgrade libpoppler58 | Oct 6, 2017 | Jun 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub