The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Nov 5, 2010 |
| Centos_linux | — | Upgrade xpdfUpgrade tetex-docUpgrade gpdfUpgrade tetexUpgrade cups-libsUpgrade popplerUpgrade tetex-latexUpgrade kdegraphicsUpgrade tetex-dvipsUpgrade poppler-utilsUpgrade kdegraphics-develUpgrade tetex-fontsUpgrade tetex-afmUpgrade poppler-develUpgrade cups-develUpgrade cupsUpgrade tetex-xdvi | Dec 1, 2016 | Nov 5, 2010 |
| Debian | — | Upgrade popplerUpgrade xpdf | Jul 30, 2024 | Nov 5, 2010 |
| Gentoo Linux | — | Upgrade app-text/poppler.Upgrade app-text/xpdf. | Oct 30, 2017 | Nov 5, 2010 |
| Oracle_linux | — | Upgrade poppler-qt-develUpgrade poppler-qt4Upgrade tetex-xdviUpgrade tetex-fontsUpgrade popplerUpgrade tetex-latexUpgrade poppler-qt4-develUpgrade tetex-docUpgrade poppler-glibUpgrade poppler-qtUpgrade tetex-afmUpgrade tetex-dvipsUpgrade poppler-develUpgrade poppler-glib-develUpgrade tetexUpgrade poppler-utils | Oct 16, 2024 | Nov 5, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 24, 2010 |
| Suse | — | Upgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-filters-optionalUpgrade libreoffice-calcUpgrade libpoppler5Upgrade libreoffice-base-extensionsUpgrade libreoffice-kde4Upgrade libpoppler-develUpgrade libreoffice-writer-extensionsUpgrade libreoffice-calc-extensionsUpgrade libpoppler-glib-develUpgrade libreoffice-kdeUpgrade libreoffice-mathUpgrade libreoffice-officebeanUpgrade libreoffice-gnomeUpgrade libpoppler-qt3-develUpgrade libreoffice-l10n-prebuiltUpgrade libpoppler-qt4-develUpgrade libreoffice-draw-extensionsUpgrade libreofficeUpgrade libreoffice-pyunoUpgrade libreoffice-impressUpgrade libreoffice-writerUpgrade libreoffice-impress-extensionsUpgrade libreoffice-baseUpgrade libpoppler-glib4Upgrade libpoppler-qt4-3Upgrade libreoffice-monoUpgrade libpoppler-qt2Upgrade libreoffice-testtoolUpgrade libreoffice-mailmergeUpgrade libreoffice-sdkUpgrade libpoppler4Upgrade poppler-toolsUpgrade libreoffice-draw | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpoppler4Upgrade libpoppler-glib2Upgrade libpoppler-glib5Upgrade libpoppler-glib4Upgrade libpoppler1Upgrade libpoppler5Upgrade libpoppler7Upgrade libpoppler2Upgrade libpoppler1-glib | Nov 8, 2024 | Nov 5, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub