The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Nov 5, 2010 |
| Centos_linux | — | Upgrade poppler-utilsUpgrade kdegraphics-develUpgrade cupsUpgrade poppler-develUpgrade tetex-fontsUpgrade cups-develUpgrade tetex-dvipsUpgrade tetex-afmUpgrade tetex-xdviUpgrade tetex-latexUpgrade kdegraphicsUpgrade tetexUpgrade gpdfUpgrade xpdfUpgrade popplerUpgrade cups-libsUpgrade tetex-doc | Dec 1, 2016 | Nov 5, 2010 |
| Debian | — | Upgrade popplerUpgrade xpdf | Jul 30, 2024 | Nov 5, 2010 |
| Gentoo Linux | — | Upgrade app-text/poppler.Upgrade app-text/xpdf. | Oct 30, 2017 | Nov 5, 2010 |
| Oracle_linux | — | Upgrade popplerUpgrade tetex-xdviUpgrade tetex-fontsUpgrade poppler-qt-develUpgrade poppler-qt4Upgrade tetex-dvipsUpgrade poppler-qtUpgrade tetex-docUpgrade poppler-qt4-develUpgrade poppler-develUpgrade tetexUpgrade tetex-afmUpgrade poppler-glibUpgrade poppler-glib-develUpgrade poppler-utilsUpgrade tetex-latex | Oct 16, 2024 | Nov 5, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 24, 2010 |
| Suse | — | Upgrade libreoffice-l10n-prebuiltUpgrade libreoffice-pyunoUpgrade libpoppler4Upgrade poppler-toolsUpgrade libpoppler-glib4Upgrade libreoffice-monoUpgrade libpoppler-qt3-develUpgrade libreofficeUpgrade libreoffice-writerUpgrade libreoffice-testtoolUpgrade libreoffice-draw-extensionsUpgrade libreoffice-drawUpgrade libreoffice-impressUpgrade libreoffice-impress-extensionsUpgrade libreoffice-mailmergeUpgrade libreoffice-baseUpgrade libpoppler-qt2Upgrade libpoppler-qt4-3Upgrade libpoppler-qt4-develUpgrade libreoffice-sdkUpgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-gnomeUpgrade libreoffice-calc-extensionsUpgrade libpoppler-develUpgrade libpoppler5Upgrade libpoppler-glib-develUpgrade libreoffice-writer-extensionsUpgrade libreoffice-officebeanUpgrade libreoffice-kde4Upgrade libreoffice-filters-optionalUpgrade libreoffice-mathUpgrade libreoffice-kdeUpgrade libreoffice-base-extensionsUpgrade libreoffice-calc | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpoppler4Upgrade libpoppler-glib4Upgrade libpoppler-glib5Upgrade libpoppler-glib2Upgrade libpoppler1Upgrade libpoppler7Upgrade libpoppler2Upgrade libpoppler1-glibUpgrade libpoppler5 | Nov 8, 2024 | Nov 5, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub