Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF document.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade poppler | Aug 30, 2017 | May 6, 2016 |
| Amazon_linux | — | Upgrade poppler | Nov 19, 2016 | May 6, 2016 |
| Debian | — | Upgrade poppler | May 2, 2016 | May 1, 2016 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Oct 30, 2017 | May 6, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utils | Nov 30, 2017 | May 6, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade compat-poppler022-glibUpgrade compat-poppler022Upgrade compat-poppler022-qt | Nov 3, 2020 | May 6, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade compat-poppler022Upgrade compat-poppler022-qtUpgrade compat-poppler022-glib | Apr 30, 2021 | May 6, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade compat-poppler022-glibUpgrade compat-poppler022-qtUpgrade compat-poppler022 | Aug 16, 2019 | May 6, 2016 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | May 6, 2016 |
| Oracle_linux | — | Upgrade poppler-glibUpgrade poppler-demosUpgrade popplerUpgrade poppler-glib-develUpgrade poppler-cpp-develUpgrade poppler-cppUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-develUpgrade poppler-qt-devel | Nov 9, 2016 | May 6, 2016 |
| Redhat_linux | — | Upgrade poppler-cpp-develUpgrade poppler-qtUpgrade poppler-glibUpgrade popplerUpgrade poppler-glib-develUpgrade poppler-cppUpgrade poppler-qt-develUpgrade poppler-utilsUpgrade poppler-demosNo solution existsUpgrade poppler-debuginfoUpgrade poppler-devel | Nov 4, 2016 | May 6, 2016 |
| Suse | — | Upgrade libpoppler-glib-develUpgrade libpoppler-develUpgrade libpoppler-qt4-4Upgrade libpoppler-glib8Upgrade libpoppler5Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-qt4-develUpgrade libpoppler-qt2Upgrade poppler-toolsUpgrade libpoppler-qt3-develUpgrade libpoppler-qt4-3Upgrade libpoppler44Upgrade libpoppler-glib4 | May 19, 2016 | May 6, 2016 |
| Ubuntu | — | Upgrade libpoppler-qt4-3Upgrade libpoppler-glib8Upgrade libpoppler52Upgrade libpoppler44Upgrade libpoppler19Upgrade libpoppler-qt4-4Upgrade poppler-utilsUpgrade libpoppler-qt5-1Upgrade libpoppler-cpp0 | May 2, 2016 | May 2, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub