The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Jul 30, 2024 | Jan 9, 2020 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Oct 6, 2013 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.3.0.0.28.0 on Solaris 11.3Upgrade desktop/pdf-viewer/evince to version 2.30.3-0.175.2.4.0.5.0 on Solaris 11.2 | May 29, 2017 | May 29, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 9, 2020 |
| Suse | — | Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade libpoppler25Upgrade libpoppler-qt4-4Upgrade libpoppler-cpp0Upgrade libpoppler-qt4-develUpgrade libpoppler-glib8Upgrade typelib-1_0-Poppler-0_18Upgrade popplerUpgrade poppler-toolsUpgrade poppler-qt | Dec 12, 2013 | Dec 10, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub