The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Jul 30, 2024 | Jan 9, 2020 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Oct 6, 2013 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/evince to version 2.30.3-0.175.2.4.0.5.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.3.0.0.28.0 on Solaris 11.3 | May 29, 2017 | May 29, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 9, 2020 |
| Suse | — | Upgrade libpoppler25Upgrade libpoppler-qt4-4Upgrade libpoppler-cpp0Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade libpoppler-qt4-develUpgrade poppler-toolsUpgrade poppler-qtUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib8Upgrade poppler | Dec 12, 2013 | Dec 10, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub