Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-qt-develUpgrade poppler-develUpgrade poppler-debuginfoUpgrade poppler-demosUpgrade poppler-cppUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade popplerUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-cpp-devel | Aug 25, 2020 | Sep 5, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Sep 5, 2019 |
| Centos_linux | — | Upgrade poppler-cppUpgrade poppler-glibUpgrade evince-libsUpgrade poppler-debuginfoUpgrade evince-dviUpgrade popplerUpgrade poppler-qt-develUpgrade evinceUpgrade evince-browser-pluginUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade poppler-develUpgrade evince-debuginfoUpgrade poppler-qtUpgrade evince-nautilusUpgrade poppler-demosUpgrade poppler-glib-develUpgrade evince-devel | Apr 1, 2020 | Sep 5, 2019 |
| Debian | — | Upgrade poppler | Oct 2, 2019 | Sep 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade popplerUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler-utils | Feb 22, 2021 | Sep 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade popplerUpgrade poppler-qt | Apr 30, 2021 | Sep 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-glibUpgrade poppler-qtUpgrade popplerUpgrade poppler-utils | Dec 16, 2020 | Sep 5, 2019 |
| Oracle_linux | — | Upgrade poppler-develUpgrade evince-libsUpgrade evince-browser-pluginUpgrade poppler-qtUpgrade evince-nautilusUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade poppler-cppUpgrade poppler-qt-develUpgrade poppler-glib-develUpgrade poppler-demosUpgrade evince-develUpgrade popplerUpgrade evince-dviUpgrade evinceUpgrade poppler-glib | Oct 5, 2022 | Sep 5, 2019 |
| Redhat_linux | — | Upgrade poppler-glib-develUpgrade evinceUpgrade popplerUpgrade poppler-cppUpgrade evince-dviUpgrade poppler-glibUpgrade evince-libsUpgrade evince-nautilusUpgrade evince-browser-pluginUpgrade poppler-cpp-develUpgrade poppler-utilsUpgrade evince-debuginfoUpgrade poppler-qtNo solution existsUpgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-demosUpgrade evince-develUpgrade poppler-debuginfo | Apr 1, 2020 | Sep 5, 2019 |
| Suse | — | Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler44Upgrade libpoppler73-32bitUpgrade libpoppler-cpp0Upgrade poppler-toolsUpgrade libpoppler-glib8Upgrade libpoppler-qt4-4Upgrade libpoppler-glib-develUpgrade libpoppler-qt4-develUpgrade libpoppler60Upgrade libpoppler-develUpgrade libpoppler73 | Aug 9, 2024 | Sep 5, 2019 |
| Ubuntu | — | Upgrade libpoppler73Upgrade libpoppler58Upgrade poppler-utils | Nov 27, 2020 | Sep 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub