The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade tetex-xdviUpgrade kdegraphicsUpgrade tetex-fontsUpgrade cups-libsUpgrade poppler-develUpgrade kdegraphics-develUpgrade popplerUpgrade tetex-dvipsUpgrade cups-lpdUpgrade tetex-docUpgrade tetex-afmUpgrade cupsUpgrade tetexUpgrade xpdfUpgrade cups-develUpgrade gpdfUpgrade poppler-utilsUpgrade tetex-latex | Dec 1, 2016 | Apr 23, 2009 |
| Debian | — | Upgrade xpdfUpgrade poppler | Jul 30, 2024 | Apr 23, 2009 |
| Freebsd | — | Upgrade xpdf | Dec 10, 2025 | Apr 18, 2009 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Apr 23, 2009 |
| Oracle_linux | — | Upgrade tetex-docUpgrade poppler-develUpgrade tetex-dvipsUpgrade tetex-fontsUpgrade tetex-xdviUpgrade cups-libsUpgrade cups-lpdUpgrade cups-develUpgrade tetexUpgrade popplerUpgrade cupsUpgrade poppler-utilsUpgrade tetex-latexUpgrade tetex-afm | Oct 16, 2024 | Apr 23, 2009 |
| Suse | — | Upgrade libpoppler-qt6-3Upgrade libpoppler-qt4-develUpgrade libpoppler148Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-cpp3Upgrade libpoppler-qt4-4Upgrade libpoppler-qt5-1Upgrade libpoppler-cpp2Upgrade libpoppler44Upgrade libpoppler60Upgrade libpoppler73Upgrade poppler-toolsUpgrade libpoppler-glib8Upgrade libpoppler-qt4-3Upgrade libpoppler-cpp0Upgrade libpoppler-qt6-develUpgrade libpoppler5Upgrade libpoppler-qt2Upgrade libpoppler4Upgrade libpoppler-qt3-develUpgrade libpoppler157Upgrade libpoppler-glib4 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpoppler-glib3Upgrade libpoppler-glib2Upgrade libpoppler2Upgrade libpoppler3Upgrade kwordUpgrade libpoppler1-glibUpgrade libpoppler1 | Nov 8, 2024 | Apr 23, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub