Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade poppler | Sep 30, 2017 | Jun 22, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 22, 2017 |
| Centos_linux | — | Upgrade poppler-utilsUpgrade poppler-qt4Upgrade poppler-qt-develUpgrade poppler-qt4-develUpgrade poppler-develUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-glib-develUpgrade poppler-cppUpgrade popplerUpgrade poppler-cpp-develUpgrade poppler-demosUpgrade poppler-debuginfo | Sep 1, 2017 | Jun 22, 2017 |
| Debian | — | Upgrade poppler | Jan 9, 2018 | Jun 22, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade poppler-qtUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler | Nov 30, 2017 | Jun 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler | Nov 30, 2017 | Jun 22, 2017 |
| Oracle_linux | — | Upgrade poppler-qtUpgrade popplerUpgrade poppler-utilsUpgrade poppler-qt4Upgrade poppler-cpp-develUpgrade poppler-glibUpgrade poppler-cppUpgrade poppler-qt4-develUpgrade poppler-glib-develUpgrade poppler-demosUpgrade poppler-qt-develUpgrade poppler-devel | Aug 31, 2017 | Jun 21, 2017 |
| Redhat_linux | — | Upgrade poppler-demosUpgrade poppler-debuginfoUpgrade poppler-qt-develUpgrade popplerNo solution existsUpgrade poppler-qt4Upgrade poppler-utilsUpgrade poppler-develUpgrade poppler-glibUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-qt4-develUpgrade poppler-glib-develUpgrade poppler-qt | Aug 31, 2017 | Jun 22, 2017 |
| Suse | — | Upgrade libpoppler-qt4-develUpgrade libpoppler-develUpgrade libpoppler-qt4-4Upgrade libpoppler44Upgrade libpoppler-glib8Upgrade libpoppler-glib-develUpgrade libpoppler60Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-cpp0Upgrade poppler-tools | Jul 28, 2017 | Jun 22, 2017 |
| Ubuntu | — | Upgrade libpoppler58Upgrade poppler-utilsUpgrade libpoppler64Upgrade libpoppler44 | Oct 6, 2017 | Jun 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub