The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade poppler-utilsUpgrade gpdfUpgrade tetexUpgrade popplerUpgrade cups-libsUpgrade kdegraphicsUpgrade xpdfUpgrade tetex-fontsUpgrade poppler-develUpgrade cupsUpgrade kdegraphics-develUpgrade tetex-dvipsUpgrade cups-lpdUpgrade tetex-latexUpgrade cups-develUpgrade tetex-docUpgrade tetex-xdviUpgrade tetex-afm | Dec 1, 2016 | Apr 23, 2009 |
| Debian | — | Upgrade xpdfUpgrade poppler | Jul 30, 2024 | Apr 23, 2009 |
| Freebsd | — | Upgrade xpdf | Dec 10, 2025 | Apr 18, 2009 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Apr 23, 2009 |
| Oracle_linux | — | Upgrade cups-lpdUpgrade cupsUpgrade tetex-xdviUpgrade poppler-develUpgrade tetex-fontsUpgrade poppler-utilsUpgrade tetex-docUpgrade cups-develUpgrade tetex-latexUpgrade popplerUpgrade tetex-afmUpgrade tetexUpgrade tetex-dvipsUpgrade cups-libs | Oct 16, 2024 | Apr 23, 2009 |
| Suse | — | Upgrade libpoppler-glib4Upgrade libpoppler60Upgrade libpoppler-glib8Upgrade libpoppler4Upgrade libpoppler73Upgrade libpoppler-qt2Upgrade libpoppler-qt3-develUpgrade poppler-toolsUpgrade libpoppler-qt5-1Upgrade libpoppler-cpp3Upgrade libpoppler-cpp0Upgrade libpoppler148Upgrade libpoppler-qt4-3Upgrade libpoppler-qt4-4Upgrade libpoppler44Upgrade libpoppler-glib-develUpgrade libpoppler-cpp2Upgrade libpoppler-develUpgrade libpoppler-qt6-3Upgrade libpoppler157Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-qt4-develUpgrade libpoppler-qt6-develUpgrade libpoppler5 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpoppler1-glibUpgrade libpoppler2Upgrade libpoppler3Upgrade kwordUpgrade libpoppler-glib2Upgrade libpoppler1Upgrade libpoppler-glib3 | Nov 8, 2024 | Apr 23, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub