Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade cups-lpdUpgrade tetex-fontsUpgrade xpdfUpgrade cupsUpgrade tetex-dvipsUpgrade tetex-latexUpgrade cups-develUpgrade tetex-docUpgrade poppler-utilsUpgrade tetexUpgrade tetex-xdviUpgrade cups-libsUpgrade kdegraphics-develUpgrade kdegraphicsUpgrade popplerUpgrade gpdfUpgrade tetex-afmUpgrade poppler-devel | Dec 1, 2016 | Oct 21, 2009 |
| Debian | — | Upgrade xpdfUpgrade poppler | Jul 30, 2024 | Oct 21, 2009 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Oct 21, 2009 |
| Oracle_linux | — | Upgrade tetex-afmUpgrade cupsUpgrade tetex-fontsUpgrade tetex-dvipsUpgrade poppler-develUpgrade tetex-xdviUpgrade cups-libsUpgrade poppler-utilsUpgrade tetex-latexUpgrade cups-develUpgrade cups-lpdUpgrade popplerUpgrade tetex-docUpgrade tetex | Oct 16, 2024 | Oct 21, 2009 |
| Suse | — | Upgrade libpoppler-qt4-develUpgrade libpoppler-cpp3Upgrade libpoppler-qt3-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib8Upgrade libpoppler-qt6-3Upgrade libpoppler4Upgrade libpoppler44Upgrade libpoppler-qt2Upgrade libpoppler-develUpgrade libpoppler-qt4-3Upgrade libpoppler5Upgrade libpoppler60Upgrade libpoppler-glib-develUpgrade libpoppler-qt6-develUpgrade poppler-toolsUpgrade libpoppler-glib4Upgrade libpoppler73Upgrade libpoppler-cpp0Upgrade libpoppler-qt4-4Upgrade libpoppler-cpp2Upgrade libpoppler157Upgrade libpoppler148Upgrade libpoppler-qt5-1 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpoppler4Upgrade libpoppler-glib3Upgrade libpoppler1Upgrade libpoppler1-glibUpgrade libpoppler-glib4Upgrade libpoppler5Upgrade kwordUpgrade libpoppler-glib2Upgrade libpoppler2Upgrade libpoppler3 | Nov 8, 2024 | Oct 21, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub