The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade cups-lpdUpgrade tetex-docUpgrade tetex-fontsUpgrade xpdfUpgrade cups-develUpgrade poppler-utilsUpgrade tetex-dvipsUpgrade tetex-latexUpgrade cupsUpgrade kdegraphics-develUpgrade tetexUpgrade poppler-develUpgrade kdegraphicsUpgrade gpdfUpgrade cups-libsUpgrade popplerUpgrade tetex-afmUpgrade tetex-xdvi | Dec 1, 2016 | Oct 21, 2009 |
| Debian | — | Upgrade popplerUpgrade xpdf | Jul 30, 2024 | Oct 21, 2009 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Oct 21, 2009 |
| Oracle_linux | — | Upgrade tetex-fontsUpgrade poppler-develUpgrade tetex-afmUpgrade tetex-dvipsUpgrade cups-libsUpgrade tetex-xdviUpgrade cupsUpgrade cups-lpdUpgrade tetex-latexUpgrade poppler-utilsUpgrade tetex-docUpgrade popplerUpgrade tetexUpgrade cups-devel | Oct 16, 2024 | Oct 21, 2009 |
| Suse | — | Upgrade libpoppler60Upgrade libpoppler157Upgrade poppler-toolsUpgrade libpoppler5Upgrade libpoppler-cpp2Upgrade libpoppler-glib4Upgrade libpoppler-qt4-4Upgrade libpoppler-glib-develUpgrade libpoppler-qt6-develUpgrade libpoppler-cpp0Upgrade libpoppler73Upgrade libpoppler-qt5-1Upgrade libpoppler148Upgrade libpoppler44Upgrade libpoppler-cpp3Upgrade libpoppler4Upgrade libpoppler-glib8Upgrade libpoppler-qt6-3Upgrade libpoppler-qt2Upgrade libpoppler-qt4-3Upgrade libpoppler-develUpgrade libpoppler-qt4-develUpgrade libpoppler-qt3-develUpgrade typelib-1_0-Poppler-0_18 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpoppler-glib4Upgrade libpoppler-glib3Upgrade libpoppler1-glibUpgrade libpoppler4Upgrade libpoppler5Upgrade libpoppler1Upgrade kwordUpgrade libpoppler3Upgrade libpoppler2Upgrade libpoppler-glib2 | Nov 8, 2024 | Oct 21, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub