The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade popplerUpgrade xpdf | Jul 30, 2024 | Jan 9, 2007 |
| Suse | — | Upgrade libpoppler-qt4-3Upgrade libpoppler-glib-develUpgrade libpoppler-glib8Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-cpp2Upgrade libcupsimage2Upgrade libpoppler-develUpgrade libpoppler-qt6-3Upgrade libpoppler-qt3-develUpgrade libpoppler-cpp3Upgrade cups-develUpgrade cupsUpgrade libpoppler-qt4-develUpgrade libpoppler-qt2Upgrade libpoppler-qt6-develUpgrade xpdf-toolsUpgrade libcups2Upgrade cups-configUpgrade cups-clientUpgrade libpoppler5Upgrade libpoppler157Upgrade cups-libsUpgrade poppler-toolsUpgrade cups-libs-32bitUpgrade libpoppler148Upgrade cups-ddkUpgrade cups-libs-x86Upgrade libpoppler-glib4 | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade kwordUpgrade tetex-binUpgrade libpoppler1Upgrade kpdfUpgrade libpoppler0c2 | Nov 8, 2024 | Jan 9, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub