Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade popplerUpgrade poppler-cpp-develUpgrade poppler-glib-develUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler-qt-develUpgrade poppler-cppUpgrade poppler-develUpgrade poppler-demosUpgrade poppler-debuginfo | Aug 25, 2020 | Sep 5, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Sep 5, 2019 |
| Centos_linux | — | Upgrade poppler-qt-develUpgrade poppler-glibUpgrade evince-libsUpgrade poppler-debuginfoUpgrade evinceUpgrade poppler-cppUpgrade popplerUpgrade evince-dviUpgrade evince-nautilusUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade poppler-qtUpgrade poppler-demosUpgrade evince-debuginfoUpgrade evince-develUpgrade poppler-cpp-develUpgrade evince-browser-pluginUpgrade poppler-devel | Apr 1, 2020 | Sep 5, 2019 |
| Debian | — | Upgrade poppler | Oct 2, 2019 | Sep 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-glibUpgrade poppler-qtUpgrade popplerUpgrade poppler-utils | Feb 22, 2021 | Sep 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qt | Apr 30, 2021 | Sep 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-qtUpgrade poppler-glib | Dec 16, 2020 | Sep 5, 2019 |
| Oracle_linux | — | Upgrade poppler-demosUpgrade poppler-qt-develUpgrade evince-browser-pluginUpgrade evince-develUpgrade poppler-cpp-develUpgrade evince-libsUpgrade poppler-cppUpgrade poppler-develUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade poppler-qtUpgrade evince-nautilusUpgrade evinceUpgrade evince-dviUpgrade poppler-glibUpgrade poppler | Oct 5, 2022 | Sep 5, 2019 |
| Redhat_linux | — | Upgrade evince-develUpgrade evince-browser-pluginUpgrade poppler-qt-develUpgrade poppler-qtUpgrade evince-nautilusUpgrade poppler-debuginfoUpgrade poppler-utilsNo solution existsUpgrade poppler-demosUpgrade poppler-develUpgrade evince-debuginfoUpgrade poppler-cpp-develUpgrade evince-libsUpgrade poppler-glibUpgrade poppler-glib-develUpgrade evinceUpgrade evince-dviUpgrade poppler-cppUpgrade poppler | Apr 1, 2020 | Sep 5, 2019 |
| Suse | — | Upgrade libpoppler-qt4-4Upgrade libpoppler-develUpgrade poppler-toolsUpgrade libpoppler-qt4-develUpgrade libpoppler-glib8Upgrade libpoppler-glib-develUpgrade libpoppler60Upgrade libpoppler73Upgrade libpoppler44Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-cpp0Upgrade libpoppler73-32bit | Aug 9, 2024 | Sep 5, 2019 |
| Ubuntu | — | Upgrade libpoppler73Upgrade libpoppler58Upgrade poppler-utils | Nov 27, 2020 | Sep 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub