splash/Splash.cc in poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to the (1) Splash::arbitraryTransformMask, (2) Splash::blitMask, and (3) Splash::scaleMaskYuXu functions.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | Apr 9, 2013 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade desktop/pdf-viewer/evince to version 2.30.3-0.175.1.10.0.4.0 on Solaris 11.1 | May 29, 2017 | Apr 9, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 10, 2013 |
| Suse | — | Upgrade poppler-qtUpgrade poppler-toolsUpgrade poppler-glibUpgrade libpoppler-qt3-develUpgrade libpoppler-qt4-develUpgrade popplerUpgrade libpoppler-qt2Upgrade libpoppler-qt4-3Upgrade sle-sdk-releaseUpgrade libpoppler-glib-develUpgrade libpoppler-develUpgrade libpoppler5Upgrade libpoppler-glib4Upgrade poppler-devel | Dec 12, 2013 | Apr 9, 2013 |
| Ubuntu | — | Upgrade libpoppler2Upgrade libpoppler-glib6Upgrade libpoppler28Upgrade libpoppler5Upgrade libpoppler-glib8Upgrade libpoppler13Upgrade libpoppler-glib4Upgrade libpoppler-glib2Upgrade libpoppler19 | Nov 8, 2024 | Apr 9, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub