The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade tetexUpgrade kdegraphicsUpgrade popplerUpgrade gpdfUpgrade xpdfUpgrade poppler-utilsUpgrade cups-libsUpgrade tetex-docUpgrade tetex-fontsUpgrade tetex-latexUpgrade cups-lpdUpgrade poppler-develUpgrade kdegraphics-develUpgrade tetex-afmUpgrade cupsUpgrade tetex-dvipsUpgrade cups-develUpgrade tetex-xdvi | Dec 1, 2016 | Apr 23, 2009 |
| Debian | — | Upgrade xpdfUpgrade poppler | Jul 30, 2024 | Apr 23, 2009 |
| Freebsd | — | Upgrade xpdf | Dec 10, 2025 | Apr 18, 2009 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Apr 23, 2009 |
| Oracle_linux | — | Upgrade tetex-fontsUpgrade poppler-develUpgrade tetex-docUpgrade cups-lpdUpgrade cups-develUpgrade tetex-xdviUpgrade cupsUpgrade poppler-utilsUpgrade tetex-latexUpgrade tetexUpgrade cups-libsUpgrade popplerUpgrade tetex-dvipsUpgrade tetex-afm | Oct 16, 2024 | Apr 23, 2009 |
| Suse | — | Upgrade libpoppler44Upgrade libpoppler-qt6-develUpgrade libpoppler5Upgrade libpoppler-qt4-develUpgrade libpoppler-glib-develUpgrade libpoppler-qt4-4Upgrade libpoppler-cpp2Upgrade libpoppler-qt6-3Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler157Upgrade libpoppler-develUpgrade libpoppler73Upgrade libpoppler60Upgrade libpoppler-qt2Upgrade libpoppler-qt5-1Upgrade libpoppler-qt4-3Upgrade libpoppler148Upgrade libpoppler-cpp3Upgrade libpoppler-glib8Upgrade libpoppler-cpp0Upgrade libpoppler-qt3-develUpgrade libpoppler4Upgrade poppler-toolsUpgrade libpoppler-glib4 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpoppler2Upgrade libpoppler3Upgrade libpoppler1-glibUpgrade libpoppler1Upgrade libpoppler-glib3Upgrade kwordUpgrade libpoppler-glib2 | Nov 8, 2024 | Apr 23, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub