Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Jul 30, 2024 | Oct 21, 2009 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Oct 21, 2009 |
| Suse | — | Upgrade libpoppler-qt6-3Upgrade libpoppler73Upgrade libpoppler-cpp2Upgrade libpoppler-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-qt4-develUpgrade libpoppler-glib-develUpgrade libpoppler157Upgrade libpoppler-cpp0Upgrade libpoppler5Upgrade libpoppler44Upgrade libpoppler-qt5-1Upgrade libpoppler-qt6-develUpgrade libpoppler-qt2Upgrade libpoppler-qt4-3Upgrade libpoppler-qt3-develUpgrade libpoppler-cpp3Upgrade libpoppler148Upgrade libpoppler-qt4-4Upgrade libpoppler-glib8Upgrade libpoppler4Upgrade libpoppler60Upgrade libpoppler-glib4Upgrade poppler-tools | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade libpoppler3Upgrade libpoppler4Upgrade libpoppler1-glibUpgrade libpoppler-glib3Upgrade libpoppler1Upgrade libpoppler2Upgrade libpoppler-glib4Upgrade libpoppler-glib2Upgrade libpoppler5 | Nov 8, 2024 | Oct 21, 2009 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub