The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade popplerUpgrade xpdf | Jul 30, 2024 | Jan 9, 2007 |
| Suse | — | Upgrade libpoppler-qt4-develUpgrade libpoppler-glib4Upgrade libcups2Upgrade libpoppler-qt2Upgrade cups-libs-32bitUpgrade cups-ddkUpgrade cups-libsUpgrade cupsUpgrade libpoppler5Upgrade libpoppler157Upgrade cups-libs-x86Upgrade libpoppler148Upgrade cups-clientUpgrade cups-configUpgrade poppler-toolsUpgrade xpdf-toolsUpgrade libpoppler-qt6-develUpgrade libpoppler-cpp3Upgrade libpoppler-cpp2Upgrade cups-develUpgrade libpoppler-qt4-3Upgrade libcupsimage2Upgrade libpoppler-qt6-3Upgrade libpoppler-glib8Upgrade libpoppler-glib-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-develUpgrade libpoppler-qt3-devel | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade tetex-binUpgrade kwordUpgrade libpoppler1Upgrade libpoppler0c2Upgrade kpdf | Nov 8, 2024 | Jan 9, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub