splash/Splash.cc in poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to the (1) Splash::arbitraryTransformMask, (2) Splash::blitMask, and (3) Splash::scaleMaskYuXu functions.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Apr 9, 2013 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/evince to version 2.30.3-0.175.1.10.0.4.0 on Solaris 11.1Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Apr 9, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 10, 2013 |
| Suse | — | Upgrade sle-sdk-releaseUpgrade libpoppler-glib-develUpgrade libpoppler-develUpgrade poppler-develUpgrade libpoppler-glib4Upgrade libpoppler5Upgrade popplerUpgrade libpoppler-qt3-develUpgrade poppler-toolsUpgrade libpoppler-qt4-3Upgrade poppler-qtUpgrade libpoppler-qt4-develUpgrade libpoppler-qt2Upgrade poppler-glib | Dec 12, 2013 | Apr 9, 2013 |
| Ubuntu | — | Upgrade libpoppler28Upgrade libpoppler2Upgrade libpoppler-glib6Upgrade libpoppler5Upgrade libpoppler19Upgrade libpoppler-glib4Upgrade libpoppler-glib8Upgrade libpoppler13Upgrade libpoppler-glib2 | Nov 8, 2024 | Apr 9, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub