The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF file with an invalid Form Opt entry.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Jul 30, 2024 | Mar 3, 2009 |
| Suse | — | Upgrade libpoppler5Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade libpoppler-qt4-develUpgrade libpoppler-qt4-3Upgrade libpoppler4Upgrade libpoppler-glib4Upgrade poppler-toolsUpgrade libpoppler-qt2Upgrade libpoppler-qt3-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpoppler-glib2Upgrade libpoppler-glib4Upgrade libpoppler4Upgrade libpoppler1-glibUpgrade libpoppler-glib3Upgrade libpoppler2Upgrade libpoppler3Upgrade libpoppler1 | Nov 8, 2024 | Mar 3, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub