The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Jul 30, 2024 | Jan 9, 2020 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Oct 6, 2013 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.3.0.0.28.0 on Solaris 11.3Upgrade desktop/pdf-viewer/evince to version 2.30.3-0.175.2.4.0.5.0 on Solaris 11.2 | May 29, 2017 | May 29, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 9, 2020 |
| Suse | — | Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-qt4-develUpgrade poppler-qtUpgrade libpoppler-glib8Upgrade poppler-toolsUpgrade popplerUpgrade libpoppler-cpp0Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade libpoppler-qt4-4Upgrade libpoppler25 | Dec 12, 2013 | Dec 10, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub