The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kdegraphicsUpgrade tetex-fontsUpgrade tetex-dvipsUpgrade tetex-docUpgrade poppler-develUpgrade cups-libsUpgrade tetex-latexUpgrade kdegraphics-develUpgrade gpdfUpgrade popplerUpgrade xpdfUpgrade cupsUpgrade cups-develUpgrade tetexUpgrade tetex-afmUpgrade poppler-utilsUpgrade cups-lpdUpgrade tetex-xdvi | Dec 1, 2016 | Apr 23, 2009 |
| Debian | — | Upgrade popplerUpgrade xpdf | Jul 30, 2024 | Apr 23, 2009 |
| Freebsd | — | Upgrade xpdf | Dec 10, 2025 | Apr 18, 2009 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Apr 23, 2009 |
| Oracle_linux | — | Upgrade poppler-utilsUpgrade tetexUpgrade tetex-dvipsUpgrade tetex-docUpgrade cupsUpgrade cups-develUpgrade tetex-latexUpgrade tetex-afmUpgrade cups-lpdUpgrade popplerUpgrade cups-libsUpgrade tetex-xdviUpgrade poppler-develUpgrade tetex-fonts | Oct 16, 2024 | Apr 23, 2009 |
| Suse | — | Upgrade libpoppler44Upgrade libpoppler-qt4-develUpgrade libpoppler73Upgrade libpoppler-glib4Upgrade libpoppler-cpp3Upgrade libpoppler-qt4-3Upgrade poppler-toolsUpgrade libpoppler-qt2Upgrade libpoppler-glib8Upgrade libpoppler148Upgrade libpoppler60Upgrade libpoppler-qt6-develUpgrade libpoppler-qt5-1Upgrade libpoppler-glib-develUpgrade libpoppler-qt3-develUpgrade libpoppler4Upgrade libpoppler5Upgrade libpoppler-develUpgrade libpoppler-qt6-3Upgrade libpoppler157Upgrade libpoppler-qt4-4Upgrade libpoppler-cpp0Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-cpp2 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade kwordUpgrade libpoppler-glib3Upgrade libpoppler3Upgrade libpoppler2Upgrade libpoppler1-glibUpgrade libpoppler-glib2Upgrade libpoppler1 | Nov 8, 2024 | Apr 23, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub