In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-qt-develUpgrade poppler-cpp-develUpgrade popplerUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade poppler-develUpgrade poppler-cppUpgrade poppler-glibUpgrade poppler-demosUpgrade poppler-debuginfo | Apr 27, 2020 | Jan 3, 2019 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Jan 3, 2019 |
| Centos_linux | — | Upgrade poppler-qt-develUpgrade okular-libsUpgrade okular-debuginfoUpgrade poppler-cppUpgrade evinceUpgrade poppler-glib-debuginfoUpgrade evince-debuginfoUpgrade poppler-debugsourceUpgrade poppler-utils-debuginfoUpgrade poppler-glibUpgrade evince-develUpgrade poppler-glib-develUpgrade evince-dviUpgrade okularUpgrade popplerUpgrade evince-browser-pluginUpgrade okular-partUpgrade evince-nautilusUpgrade poppler-qt5-debuginfoUpgrade poppler-develUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-cpp-debuginfoUpgrade poppler-demosUpgrade poppler-cpp-develUpgrade poppler-debuginfoUpgrade evince-libsUpgrade okular-devel | Aug 28, 2019 | Jan 3, 2019 |
| Debian | — | Upgrade poppler | Mar 12, 2019 | Jan 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qt | Sep 16, 2021 | Jan 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade popplerUpgrade poppler-glib | Nov 19, 2019 | Jan 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-qtUpgrade poppler-utils | Nov 19, 2019 | Jan 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utils | Aug 28, 2019 | Jan 3, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.75.0-11.4.10.0.1.2.0 on Solaris 11.4 | Jun 26, 2019 | Jan 3, 2019 |
| Oracle_linux | — | Upgrade popplerUpgrade poppler-qt-develUpgrade evinceUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-glib-develUpgrade poppler-cppUpgrade evince-dviUpgrade poppler-cpp-develUpgrade evince-develUpgrade poppler-qtUpgrade okularUpgrade poppler-demosUpgrade poppler-develUpgrade okular-develUpgrade evince-libsUpgrade okular-libsUpgrade evince-browser-pluginUpgrade poppler-qt5Upgrade okular-partUpgrade evince-nautilusUpgrade poppler-qt5-devel | Jul 21, 2020 | Dec 30, 2018 |
| Redhat_linux | — | Upgrade poppler-debuginfoUpgrade evince-libsUpgrade okular-debuginfoUpgrade evince-browser-pluginUpgrade poppler-qt5-debuginfoUpgrade poppler-utilsUpgrade poppler-qt5Upgrade poppler-qt5-develUpgrade poppler-demosUpgrade poppler-develUpgrade poppler-cpp-debuginfoUpgrade okular-develUpgrade evince-nautilusUpgrade okular-partUpgrade popplerUpgrade poppler-qtUpgrade evince-debuginfoUpgrade evinceUpgrade poppler-glib-debuginfoUpgrade poppler-cpp-develUpgrade poppler-utils-debuginfoUpgrade okular-libsNo solution existsUpgrade poppler-glib-develUpgrade poppler-cppUpgrade poppler-qt-develUpgrade okularUpgrade evince-dviUpgrade evince-develUpgrade poppler-debugsourceUpgrade poppler-glib | Aug 7, 2019 | Jan 3, 2019 |
| Suse | — | Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade libpoppler73-32bitUpgrade typelib-1_0-Poppler-0_18Upgrade poppler-toolsUpgrade libpoppler73Upgrade libpoppler-glib8Upgrade libpoppler-cpp0 | Dec 2, 2021 | Jan 3, 2019 |
| Ubuntu | — | Upgrade libpoppler79Upgrade libpoppler58Upgrade libpoppler73Upgrade libpoppler85Upgrade poppler-utils | Jun 27, 2019 | Jan 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub