In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-demosUpgrade poppler-debuginfoUpgrade poppler-glibUpgrade poppler-glib-develUpgrade popplerUpgrade poppler-cpp-develUpgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-cpp | Apr 27, 2020 | Jan 3, 2019 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Jan 3, 2019 |
| Centos_linux | — | Upgrade okular-libsUpgrade poppler-debugsourceUpgrade okular-debuginfoUpgrade poppler-glib-debuginfoUpgrade evinceUpgrade okularUpgrade poppler-cppUpgrade poppler-qt-develUpgrade poppler-utils-debuginfoUpgrade evince-dviUpgrade evince-debuginfoUpgrade evince-develUpgrade poppler-glibUpgrade poppler-glib-develUpgrade popplerUpgrade evince-browser-pluginUpgrade poppler-qt5-debuginfoUpgrade poppler-demosUpgrade evince-nautilusUpgrade evince-libsUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-cpp-debuginfoUpgrade okular-develUpgrade poppler-cpp-develUpgrade poppler-develUpgrade poppler-debuginfoUpgrade okular-part | Aug 28, 2019 | Jan 3, 2019 |
| Debian | — | Upgrade poppler | Mar 12, 2019 | Jan 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler | Sep 16, 2021 | Jan 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler | Nov 19, 2019 | Jan 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade popplerUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-qt | Nov 19, 2019 | Jan 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade popplerUpgrade poppler-qt | Aug 28, 2019 | Jan 3, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.75.0-11.4.10.0.1.2.0 on Solaris 11.4 | Jun 26, 2019 | Jan 3, 2019 |
| Oracle_linux | — | Upgrade poppler-qt5Upgrade okular-partUpgrade okular-libsUpgrade poppler-demosUpgrade evince-nautilusUpgrade evince-browser-pluginUpgrade okularUpgrade poppler-develUpgrade evince-libsUpgrade poppler-qt5-develUpgrade okular-develUpgrade evince-dviUpgrade poppler-glib-develUpgrade poppler-cpp-develUpgrade evince-develUpgrade poppler-cppUpgrade poppler-qtUpgrade poppler-utilsUpgrade evinceUpgrade poppler-glibUpgrade poppler-qt-develUpgrade poppler | Jul 21, 2020 | Dec 30, 2018 |
| Redhat_linux | — | Upgrade poppler-develUpgrade okular-partUpgrade evince-nautilusUpgrade poppler-demosUpgrade poppler-qt5-debuginfoUpgrade poppler-qt5Upgrade poppler-cpp-debuginfoUpgrade evince-libsUpgrade evince-browser-pluginUpgrade okular-debuginfoUpgrade okular-develUpgrade poppler-debuginfoUpgrade poppler-utilsUpgrade poppler-qt5-develUpgrade poppler-glib-develUpgrade evince-dviUpgrade poppler-qt-develUpgrade poppler-cppUpgrade poppler-glibUpgrade poppler-glib-debuginfoUpgrade evinceUpgrade evince-develUpgrade poppler-cpp-develNo solution existsUpgrade poppler-qtUpgrade okularUpgrade poppler-debugsourceUpgrade okular-libsUpgrade poppler-utils-debuginfoUpgrade evince-debuginfoUpgrade poppler | Aug 7, 2019 | Jan 3, 2019 |
| Suse | — | Upgrade libpoppler-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler73-32bitUpgrade libpoppler-glib-develUpgrade libpoppler-glib8Upgrade libpoppler-cpp0Upgrade poppler-toolsUpgrade libpoppler73 | Dec 2, 2021 | Jan 3, 2019 |
| Ubuntu | — | Upgrade libpoppler73Upgrade poppler-utilsUpgrade libpoppler85Upgrade libpoppler79Upgrade libpoppler58 | Jun 27, 2019 | Jan 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub