Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Safari | — | Upgrade to Apple Safari version 4.0Uninstall Apple Safari on Windows | Jan 5, 2012 | Apr 23, 2009 |
| Centos_linux | — | Upgrade xpdfUpgrade tetex-docUpgrade cups-lpdUpgrade cupsUpgrade tetex-fontsUpgrade cups-develUpgrade popplerUpgrade poppler-utilsUpgrade gpdfUpgrade tetex-latexUpgrade kdegraphicsUpgrade tetexUpgrade tetex-dvipsUpgrade tetex-afmUpgrade kdegraphics-develUpgrade tetex-xdviUpgrade poppler-develUpgrade cups-libs | Dec 1, 2016 | Apr 23, 2009 |
| Debian | — | Upgrade popplerUpgrade xpdf | Jul 30, 2024 | Apr 23, 2009 |
| Freebsd | — | Upgrade xpdf | Dec 10, 2025 | Apr 18, 2009 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Apr 23, 2009 |
| Oracle_linux | — | Upgrade tetex-afmUpgrade tetex-fontsUpgrade tetex-dvipsUpgrade cups-lpdUpgrade tetex-xdviUpgrade poppler-develUpgrade poppler-utilsUpgrade cups-develUpgrade cups-libsUpgrade tetex-latexUpgrade tetex-docUpgrade cupsUpgrade popplerUpgrade tetex | Oct 16, 2024 | Apr 23, 2009 |
| Suse | — | Upgrade libpoppler-qt4-3Upgrade libpoppler5Upgrade libpoppler-cpp0Upgrade libpoppler60Upgrade libpoppler148Upgrade libpoppler157Upgrade libpoppler-glib-develUpgrade libpoppler-develUpgrade libpoppler-qt6-3Upgrade libpoppler-qt5-1Upgrade libpoppler-qt4-4Upgrade libpoppler-qt4-develUpgrade libpoppler44Upgrade libpoppler-glib8Upgrade poppler-toolsUpgrade libpoppler4Upgrade libpoppler-qt6-develUpgrade libpoppler-cpp3Upgrade libpoppler-qt3-develUpgrade libpoppler73Upgrade libpoppler-cpp2Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib4Upgrade libpoppler-qt2 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpoppler1-glibUpgrade kwordUpgrade libpoppler2Upgrade libpoppler1Upgrade libpoppler3Upgrade libpoppler-glib2Upgrade libpoppler-glib3 | Nov 8, 2024 | Apr 23, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub