The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade tetex-afmUpgrade cups-lpdUpgrade cupsUpgrade poppler-utilsUpgrade kdegraphics-develUpgrade tetex-docUpgrade popplerUpgrade gpdfUpgrade tetex-latexUpgrade tetex-dvipsUpgrade cups-develUpgrade tetexUpgrade xpdfUpgrade cups-libsUpgrade tetex-fontsUpgrade kdegraphicsUpgrade poppler-develUpgrade tetex-xdvi | Dec 1, 2016 | Apr 23, 2009 |
| Debian | — | Upgrade popplerUpgrade xpdf | Jul 30, 2024 | Apr 23, 2009 |
| Freebsd | — | Upgrade xpdf | Dec 10, 2025 | Apr 18, 2009 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Apr 23, 2009 |
| Oracle_linux | — | Upgrade tetex-xdviUpgrade cups-libsUpgrade tetex-dvipsUpgrade tetex-afmUpgrade tetex-fontsUpgrade poppler-develUpgrade popplerUpgrade cups-develUpgrade cups-lpdUpgrade tetex-latexUpgrade tetexUpgrade poppler-utilsUpgrade cupsUpgrade tetex-doc | Oct 16, 2024 | Apr 23, 2009 |
| Suse | — | Upgrade libpoppler-qt2Upgrade libpoppler157Upgrade libpoppler44Upgrade libpoppler5Upgrade libpoppler73Upgrade libpoppler-glib4Upgrade libpoppler148Upgrade poppler-toolsUpgrade libpoppler-qt4-develUpgrade libpoppler60Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib-develUpgrade libpoppler-cpp3Upgrade libpoppler-glib8Upgrade libpoppler-qt5-1Upgrade libpoppler-qt3-develUpgrade libpoppler4Upgrade libpoppler-qt6-3Upgrade libpoppler-qt6-develUpgrade libpoppler-develUpgrade libpoppler-qt4-4Upgrade libpoppler-qt4-3Upgrade libpoppler-cpp0Upgrade libpoppler-cpp2 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpoppler-glib3Upgrade libpoppler1Upgrade libpoppler-glib2Upgrade libpoppler3Upgrade libpoppler1-glibUpgrade libpoppler2 | Nov 8, 2024 | Apr 23, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub