The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Jul 30, 2024 | Jan 9, 2020 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Oct 6, 2013 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.3.0.0.28.0 on Solaris 11.3Upgrade desktop/pdf-viewer/evince to version 2.30.3-0.175.2.4.0.5.0 on Solaris 11.2 | May 29, 2017 | May 29, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 9, 2020 |
| Suse | — | Upgrade libpoppler-glib-develUpgrade libpoppler-cpp0Upgrade libpoppler-develUpgrade libpoppler25Upgrade libpoppler-qt4-4Upgrade typelib-1_0-Poppler-0_18Upgrade poppler-toolsUpgrade poppler-qtUpgrade libpoppler-qt4-develUpgrade libpoppler-glib8Upgrade poppler | Dec 12, 2013 | Dec 10, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub