In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-develUpgrade poppler-glib-develUpgrade poppler-cpp-develUpgrade popplerUpgrade poppler-cppUpgrade poppler-qt-develUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-demosUpgrade poppler-debuginfoUpgrade poppler-glib | Apr 27, 2020 | Jan 3, 2019 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Jan 3, 2019 |
| Centos_linux | — | Upgrade poppler-glib-debuginfoUpgrade popplerUpgrade evince-develUpgrade evinceUpgrade okularUpgrade poppler-cppUpgrade okular-debuginfoUpgrade poppler-qt-develUpgrade evince-debuginfoUpgrade poppler-debugsourceUpgrade poppler-utils-debuginfoUpgrade okular-libsUpgrade poppler-glibUpgrade poppler-glib-develUpgrade evince-dviUpgrade poppler-qtUpgrade poppler-utilsUpgrade okular-develUpgrade okular-partUpgrade poppler-develUpgrade evince-nautilusUpgrade evince-libsUpgrade poppler-demosUpgrade poppler-qt5-debuginfoUpgrade poppler-debuginfoUpgrade poppler-cpp-develUpgrade evince-browser-pluginUpgrade poppler-cpp-debuginfo | Aug 28, 2019 | Jan 3, 2019 |
| Debian | — | Upgrade poppler | Mar 12, 2019 | Jan 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler | Sep 16, 2021 | Jan 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade popplerUpgrade poppler-qt | Nov 19, 2019 | Jan 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler | Nov 19, 2019 | Jan 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-utilsUpgrade poppler-qt | Aug 28, 2019 | Jan 3, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.75.0-11.4.10.0.1.2.0 on Solaris 11.4 | Jun 26, 2019 | Jan 3, 2019 |
| Oracle_linux | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-utilsUpgrade evinceUpgrade evince-dviUpgrade poppler-glib-develUpgrade evince-develUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-qt-develUpgrade poppler-qtUpgrade okular-partUpgrade evince-nautilusUpgrade poppler-qt5-develUpgrade okular-libsUpgrade poppler-demosUpgrade poppler-qt5Upgrade okularUpgrade okular-develUpgrade evince-browser-pluginUpgrade poppler-develUpgrade evince-libs | Jul 21, 2020 | Dec 30, 2018 |
| Redhat_linux | — | Upgrade poppler-glib-debuginfoUpgrade evinceUpgrade poppler-cpp-develUpgrade evince-debuginfoUpgrade poppler-glib-develUpgrade poppler-utils-debuginfoUpgrade poppler-cppUpgrade poppler-qtUpgrade poppler-qt-develUpgrade okularUpgrade evince-dviUpgrade evince-develUpgrade okular-libsUpgrade poppler-debugsourceUpgrade poppler-glibNo solution existsUpgrade popplerUpgrade poppler-demosUpgrade poppler-qt5-develUpgrade evince-browser-pluginUpgrade okular-develUpgrade evince-libsUpgrade poppler-develUpgrade poppler-qt5-debuginfoUpgrade poppler-utilsUpgrade okular-partUpgrade evince-nautilusUpgrade poppler-debuginfoUpgrade poppler-cpp-debuginfoUpgrade okular-debuginfoUpgrade poppler-qt5 | Aug 7, 2019 | Jan 3, 2019 |
| Suse | — | Upgrade libpoppler-glib-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler73-32bitUpgrade libpoppler-develUpgrade libpoppler-glib8Upgrade poppler-toolsUpgrade libpoppler73Upgrade libpoppler-cpp0 | Dec 2, 2021 | Jan 3, 2019 |
| Ubuntu | — | Upgrade libpoppler85Upgrade libpoppler73Upgrade poppler-utilsUpgrade libpoppler58Upgrade libpoppler79 | Jun 27, 2019 | Jan 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub