Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade cups-develUpgrade poppler-utilsUpgrade tetex-latexUpgrade tetex-docUpgrade cups-lpdUpgrade tetex-dvipsUpgrade tetex-fontsUpgrade xpdfUpgrade cupsUpgrade poppler-develUpgrade gpdfUpgrade kdegraphicsUpgrade tetex-afmUpgrade tetex-xdviUpgrade cups-libsUpgrade popplerUpgrade kdegraphics-develUpgrade tetex | Dec 1, 2016 | Oct 21, 2009 |
| Debian | — | Upgrade popplerUpgrade xpdf | Jul 30, 2024 | Oct 21, 2009 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Oct 21, 2009 |
| Oracle_linux | — | Upgrade tetex-dvipsUpgrade cupsUpgrade poppler-develUpgrade tetex-fontsUpgrade cups-libsUpgrade tetex-afmUpgrade tetex-xdviUpgrade popplerUpgrade cups-lpdUpgrade tetex-latexUpgrade tetexUpgrade poppler-utilsUpgrade tetex-docUpgrade cups-devel | Oct 16, 2024 | Oct 21, 2009 |
| Suse | — | Upgrade libpoppler157Upgrade libpoppler-qt5-1Upgrade libpoppler-glib-develUpgrade libpoppler-qt4-4Upgrade libpoppler5Upgrade libpoppler-glib4Upgrade libpoppler60Upgrade libpoppler73Upgrade libpoppler-cpp0Upgrade libpoppler-qt6-develUpgrade libpoppler-cpp2Upgrade poppler-toolsUpgrade libpoppler148Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler44Upgrade libpoppler-qt2Upgrade libpoppler-qt4-develUpgrade libpoppler-develUpgrade libpoppler-qt4-3Upgrade libpoppler-qt6-3Upgrade libpoppler-qt3-develUpgrade libpoppler-cpp3Upgrade libpoppler4Upgrade libpoppler-glib8 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpoppler1-glibUpgrade libpoppler4Upgrade libpoppler5Upgrade libpoppler1Upgrade libpoppler-glib4Upgrade libpoppler-glib3Upgrade libpoppler3Upgrade libpoppler2Upgrade kwordUpgrade libpoppler-glib2 | Nov 8, 2024 | Oct 21, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub