Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Jul 30, 2024 | Oct 21, 2009 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Oct 21, 2009 |
| Suse | — | Upgrade poppler-toolsUpgrade libpoppler-glib4Upgrade libpoppler-qt4-4Upgrade libpoppler-qt2Upgrade libpoppler-qt4-3Upgrade libpoppler148Upgrade libpoppler-glib8Upgrade libpoppler-qt3-develUpgrade libpoppler-cpp3Upgrade libpoppler60Upgrade libpoppler4Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler44Upgrade libpoppler-qt5-1Upgrade libpoppler-cpp0Upgrade libpoppler5Upgrade libpoppler-qt4-develUpgrade libpoppler-cpp2Upgrade libpoppler-glib-develUpgrade libpoppler73Upgrade libpoppler157Upgrade libpoppler-qt6-develUpgrade libpoppler-qt6-3Upgrade libpoppler-devel | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade libpoppler3Upgrade libpoppler1Upgrade libpoppler-glib3Upgrade libpoppler4Upgrade libpoppler1-glibUpgrade libpoppler5Upgrade libpoppler-glib4Upgrade libpoppler-glib2Upgrade libpoppler2 | Nov 8, 2024 | Oct 21, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub