The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kdegraphicsUpgrade cups-libsUpgrade tetex-xdviUpgrade tetex-fontsUpgrade poppler-develUpgrade tetex-afmUpgrade cups-develUpgrade tetex-latexUpgrade cupsUpgrade gpdfUpgrade tetex-dvipsUpgrade tetexUpgrade tetex-docUpgrade popplerUpgrade xpdfUpgrade cups-lpdUpgrade kdegraphics-develUpgrade poppler-utils | Dec 1, 2016 | Apr 23, 2009 |
| Debian | — | Upgrade xpdfUpgrade poppler | Jul 30, 2024 | Apr 23, 2009 |
| Freebsd | — | Upgrade xpdf | Dec 10, 2025 | Apr 18, 2009 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Apr 23, 2009 |
| Oracle_linux | — | Upgrade cups-libsUpgrade tetex-fontsUpgrade tetex-dvipsUpgrade tetex-xdviUpgrade tetex-afmUpgrade cupsUpgrade tetexUpgrade poppler-utilsUpgrade popplerUpgrade tetex-latexUpgrade cups-lpdUpgrade cups-develUpgrade tetex-docUpgrade poppler-devel | Oct 16, 2024 | Apr 23, 2009 |
| Suse | — | Upgrade libpoppler60Upgrade libpoppler4Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-develUpgrade libpoppler-qt6-develUpgrade libpoppler-cpp3Upgrade libpoppler-cpp0Upgrade libpoppler-glib8Upgrade libpoppler-qt5-1Upgrade libpoppler-qt3-develUpgrade libpoppler-qt4-4Upgrade libpoppler-cpp2Upgrade libpoppler-qt6-3Upgrade libpoppler-glib-develUpgrade libpoppler-qt4-3Upgrade poppler-toolsUpgrade libpoppler-qt2Upgrade libpoppler73Upgrade libpoppler5Upgrade libpoppler148Upgrade libpoppler-qt4-develUpgrade libpoppler-glib4Upgrade libpoppler44Upgrade libpoppler157 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpoppler2Upgrade libpoppler-glib2Upgrade libpoppler3Upgrade libpoppler1-glibUpgrade libpoppler-glib3Upgrade libpoppler1 | Nov 8, 2024 | Apr 23, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub