The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kdegraphicsUpgrade cupsUpgrade tetex-latexUpgrade popplerUpgrade cups-libsUpgrade tetex-dvipsUpgrade tetex-docUpgrade poppler-utilsUpgrade poppler-develUpgrade cups-develUpgrade xpdfUpgrade tetex-afmUpgrade tetex-fontsUpgrade gpdfUpgrade kdegraphics-develUpgrade tetex-xdviUpgrade tetexUpgrade cups-lpd | Dec 1, 2016 | Apr 23, 2009 |
| Debian | — | Upgrade popplerUpgrade xpdf | Jul 30, 2024 | Apr 23, 2009 |
| Freebsd | — | Upgrade xpdf | Dec 10, 2025 | Apr 18, 2009 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Apr 23, 2009 |
| Oracle_linux | — | Upgrade tetex-latexUpgrade popplerUpgrade cups-develUpgrade cupsUpgrade cups-lpdUpgrade poppler-develUpgrade poppler-utilsUpgrade tetex-fontsUpgrade tetex-docUpgrade cups-libsUpgrade tetexUpgrade tetex-afmUpgrade tetex-dvipsUpgrade tetex-xdvi | Oct 16, 2024 | Apr 23, 2009 |
| Suse | — | Upgrade libpoppler148Upgrade libpoppler-qt4-develUpgrade libpoppler-qt3-develUpgrade libpoppler-qt2Upgrade libpoppler60Upgrade libpoppler4Upgrade libpoppler-glib8Upgrade libpoppler-glib4Upgrade poppler-toolsUpgrade libpoppler-cpp3Upgrade libpoppler-qt4-3Upgrade libpoppler-qt6-3Upgrade libpoppler-cpp2Upgrade libpoppler5Upgrade libpoppler157Upgrade libpoppler-cpp0Upgrade libpoppler-qt5-1Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler44Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade libpoppler-qt6-develUpgrade libpoppler73Upgrade libpoppler-qt4-4 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpoppler-glib3Upgrade libpoppler3Upgrade libpoppler1-glibUpgrade libpoppler-glib2Upgrade libpoppler1Upgrade libpoppler2 | Nov 8, 2024 | Apr 23, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub