Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade popplerUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-glib-develUpgrade poppler-cpp-develUpgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-demosUpgrade poppler-cppUpgrade poppler-debuginfo | Aug 25, 2020 | Sep 5, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Sep 5, 2019 |
| Centos_linux | — | Upgrade poppler-glib-develUpgrade evince-nautilusUpgrade poppler-qtUpgrade evince-browser-pluginUpgrade evince-develUpgrade poppler-cpp-develUpgrade poppler-demosUpgrade evince-debuginfoUpgrade poppler-develUpgrade poppler-utilsUpgrade evince-dviUpgrade poppler-glibUpgrade poppler-debuginfoUpgrade poppler-qt-develUpgrade popplerUpgrade poppler-cppUpgrade evinceUpgrade evince-libs | Apr 1, 2020 | Sep 5, 2019 |
| Debian | — | Upgrade poppler | Oct 2, 2019 | Sep 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-qtUpgrade poppler-glib | Feb 22, 2021 | Sep 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler | Apr 30, 2021 | Sep 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-utilsUpgrade poppler-glibUpgrade popplerUpgrade poppler-qt | Dec 16, 2020 | Sep 5, 2019 |
| Oracle_linux | — | Upgrade poppler-demosUpgrade poppler-qt-develUpgrade poppler-develUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade evince-nautilusUpgrade evince-develUpgrade evince-browser-pluginUpgrade poppler-cppUpgrade poppler-qtUpgrade poppler-glib-develUpgrade evince-libsUpgrade evince-dviUpgrade popplerUpgrade poppler-glibUpgrade evince | Oct 5, 2022 | Sep 5, 2019 |
| Redhat_linux | — | Upgrade poppler-glib-develUpgrade evince-libsUpgrade evince-dviUpgrade evinceUpgrade popplerUpgrade poppler-cppUpgrade poppler-glibUpgrade poppler-demosUpgrade poppler-utilsUpgrade evince-browser-pluginUpgrade poppler-cpp-develUpgrade poppler-debuginfoNo solution existsUpgrade evince-develUpgrade poppler-develUpgrade evince-nautilusUpgrade evince-debuginfoUpgrade poppler-qt-develUpgrade poppler-qt | Apr 1, 2020 | Sep 5, 2019 |
| Suse | — | Upgrade libpoppler-qt4-develUpgrade libpoppler-glib-develUpgrade libpoppler-glib8Upgrade libpoppler60Upgrade poppler-toolsUpgrade libpoppler-qt4-4Upgrade libpoppler73Upgrade libpoppler-develUpgrade libpoppler-cpp0Upgrade libpoppler44Upgrade libpoppler73-32bitUpgrade typelib-1_0-Poppler-0_18 | Aug 9, 2024 | Sep 5, 2019 |
| Ubuntu | — | Upgrade libpoppler73Upgrade libpoppler58Upgrade poppler-utils | Nov 27, 2020 | Sep 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub