The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade popplerUpgrade xpdf | Jul 30, 2024 | Nov 5, 2010 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Nov 5, 2010 |
| Oracle_linux | — | Upgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-glibUpgrade poppler-glib-develUpgrade poppler-utilsUpgrade poppler-qt4Upgrade popplerUpgrade poppler-qtUpgrade poppler-qt4-devel | Oct 16, 2024 | Nov 5, 2010 |
| Suse | — | Upgrade libpoppler-qt4-develUpgrade libpoppler-qt2Upgrade libpoppler-glib-develUpgrade libpoppler5Upgrade libpoppler-qt4-3Upgrade libpoppler-develUpgrade poppler-toolsUpgrade libpoppler-glib4Upgrade libpoppler-qt3-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpoppler4Upgrade libpoppler-glib5Upgrade libpoppler-glib2Upgrade libpoppler7Upgrade libpoppler1Upgrade libpoppler5Upgrade libpoppler2Upgrade libpoppler1-glibUpgrade libpoppler-glib4 | Nov 8, 2024 | Nov 5, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub