Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade cupsUpgrade libextractorUpgrade popplerUpgrade xpdf | Jul 30, 2024 | Nov 8, 2007 |
| Freebsd | — | Upgrade kofficeUpgrade kdegraphicsUpgrade cups-baseUpgrade xpdfUpgrade popplerUpgrade gpdf | Dec 10, 2025 | Nov 12, 2007 |
| Gentoo Linux | — | Upgrade kde-base/kdegraphics.Upgrade app-text/poppler.Upgrade app-office/koffice.Upgrade kde-base/kpdf.Upgrade app-office/kword. | Oct 30, 2017 | Nov 7, 2007 |
| Oracle_linux | — | Upgrade poppler-develUpgrade popplerUpgrade poppler-utils | Oct 16, 2024 | Nov 8, 2007 |
| Suse | — | Upgrade libpoppler-glib8Upgrade libpoppler-cpp3Upgrade cupsUpgrade libcupsimage2Upgrade libpoppler5Upgrade cups-libs-32bitUpgrade cups-libs-x86Upgrade cups-configUpgrade libpoppler-glib-develUpgrade libpoppler-cpp2Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler157Upgrade libpoppler-glib4Upgrade libpoppler-develUpgrade libpoppler-qt2Upgrade poppler-toolsUpgrade libcups2Upgrade cups-develUpgrade libpoppler-qt6-develUpgrade cups-ddkUpgrade libpoppler148Upgrade libpoppler-qt4-develUpgrade libpoppler-qt3-develUpgrade cups-clientUpgrade libpoppler-qt4-3Upgrade libpoppler-qt6-3Upgrade cups-libs | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade libpoppler1Upgrade libpoppler2Upgrade kword | Nov 8, 2024 | Nov 8, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub